last executing test programs: 13m30.772932361s ago: executing program 4 (id=21190): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e003d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf590000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb845129361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cbe8d23810052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b0679544"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x28}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x9}, &(0x7f00000002c0)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffffffffffffff, "c0cc9cb00eefa5694d0e3283f44ace7f864b70a9db68c8283a746b8fedda7fcc", 0x7, 0xd, 0x65, 0xfffffff9}, 0x3c) write$tun(r5, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x8c4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010022bd7000fedbdf251e00000008000300", @ANYRES32=0x0, @ANYBLOB="1c002f800c0002000000966d63a601000be103800800010000000080"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 13m30.352023766s ago: executing program 4 (id=21199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de92684a3e1ac765967623f0244a41cb9d7a1441909a5679b5fe088a4422e77db13eb1f37", 0x8a}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a6562ac1a1c75a", 0xa9}, {&(0x7f0000000840)="37df6e48d5abd55f6b04a4aca97bba51c87aa3f6b01e3fbe283d8019f748b5ad67ae505cd6b7e6868ff81aa817ba4434821cc6132e114e4cec", 0x39}], 0x3}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008e", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x338}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 13m29.405693919s ago: executing program 4 (id=21219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x61c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f0, 0x2, [@TCA_BPF_ACT={0x4ec, 0x1, [@m_simple={0xdc, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\xc2@\x1d,\x00'}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x118, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xe1, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x208, 0x6, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x0, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x8, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xffffff00, 0x2}}]}, {0x9d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f7451"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xec, 0xb, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x45}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x11, 0x6, "b243cf248ea5504cf7e5a67f45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xac, 0xb, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x6000, 0x1, 0x8000, 0x4100bcb8}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13m29.261119748s ago: executing program 4 (id=21223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000482c00fe801f000000030000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 13m28.745176612s ago: executing program 4 (id=21235): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446, 0x4aa0}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4418}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 13m23.800386917s ago: executing program 4 (id=21286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0xfdffffffffffffff) 13m23.515474654s ago: executing program 32 (id=21286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0xfdffffffffffffff) 2m51.307091073s ago: executing program 1 (id=29631): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES16=r1], 0x1c}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 2m51.244859202s ago: executing program 1 (id=29632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) 2m51.244568811s ago: executing program 1 (id=29633): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000005380), 0x4) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9b, 0x0, 0xc, 0x7c6, 0xfdb1, 0xc, 0xc16d, 0x8001}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x88f7}, @void, @eth={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @broadcast}, {0x8007, 0x8100, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "5ee84e261129b9890d2aaeb93e0a2f5da59bc8523952c06c", "0d9cbcb702b22fff696faf9ce282f32898bb1d31373c8accdf66feaf64e55477"}}}}}}}, 0x6e) 2m51.203238467s ago: executing program 1 (id=29634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x1, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r2, r1, &(0x7f0000000180)=0x8, 0x7fff) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c, 0x101000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x20000005) 2m48.886194688s ago: executing program 1 (id=29636): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x21c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20048018) unshare(0x600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002bbd70c3b55709a1a50ca997231a9d00", @ANYRES32=r5, @ANYBLOB="0c00990005000000640000000a00340001010101010100000a00060050505050505000000a00340002020202020200000a0034000101010101010000"], 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 2m48.448417064s ago: executing program 1 (id=29644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x8000040) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m33.325664494s ago: executing program 33 (id=29644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x8000040) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m25.321617892s ago: executing program 5 (id=30323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 1m10.630649806s ago: executing program 5 (id=30324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x1f}}, 0x14}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$l2tp(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040006aff030a03000000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 1m10.336238943s ago: executing program 5 (id=30452): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400cb1507001800128008000100736974000c0002800500090000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000040000701fcffffff0000010004"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe87, 0x0, 0x0, 0x0}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x206}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6, r9}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x1}}}, 0x24}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r12, 0x3, {0x2, 0x0, 0x6}}, 0x18) bind$can_j1939(r10, &(0x7f0000000140)={0x1d, r12, 0x2, {0x0, 0x1, 0x3}, 0xfd}, 0x18) 1m9.976521512s ago: executing program 5 (id=30456): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc110000120001020008000000000000000000000000000000000096000000000000000000000000002000"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) 1m9.82938337s ago: executing program 5 (id=30460): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x12c0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x11, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1320) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0xa7, "d26e9813fcbef002b4e954c97cde01e898a7a7467b15ff48462b1254b3d6802aea6fcb6553afc0daae9f4f9a5f766672343b38e000a487dcae1a65571b4007b0a85b21950ef1013ed770d2b070f176061235f973f55d59a08b56a86f9f4214703cc503cb80a5dd7f234348f65734139a65966cc0506f053a202d2bbf6a64f0f15fb8524b0970dfa07d2b1ea86d3d94e7648a500e8c1b0949f468e271944089e2bdb472de271000"}, &(0x7f0000000100)=0xcb) 1m9.601386796s ago: executing program 5 (id=30463): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x48}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_idx={0x18, 0xb}, @func, @ringbuf_query, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000640)='GPL\x00', 0xfffffe80, 0x4a, &(0x7f0000000680)=""/74, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x4, 0x6948, 0x4000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x4, 0x2, 0xc}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0xff02, 0x0) (async) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r4, r2, 0x24, 0x2011, 0xffffffffffffffff, @value=r5}, 0x20) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x200}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) close(r7) (async) sendmmsg$inet(r0, &(0x7f00000086c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}}}}}}}, 0x0) (async) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x4}}, @l2={0x1f, 0x3, @none, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='netdevsim0\x00', 0x3, 0x572, 0x7}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@bridge_dellink={0xe8, 0x11, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x48250, 0x20}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xf}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x91ea}, @IFLA_AF_SPEC={0x50, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}]}]}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "284ed13bef7b9a2b"}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9fe865a57aee8d47acecf141cc06132d"}]}, @IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0xd7) 1m3.348365347s ago: executing program 6 (id=30501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200200000000000000000000000014f194e20"], 0x52) 1m3.191751229s ago: executing program 6 (id=30507): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) 1m3.171128208s ago: executing program 3 (id=30508): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r11, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r15, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x0, 0x1, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x65, 0x0, 0x80, 0x4, 0x0, @broadcast, @local, {[@end, @timestamp={0x44, 0x24, 0x32, 0x0, 0x3, [0xfffffffe, 0x4, 0xfffffffb, 0x1, 0x8, 0x5, 0x4, 0x0]}, @timestamp_prespec={0x44, 0xc, 0xae, 0x3, 0x6, [{@empty, 0x8}]}, @lsrr={0x83, 0xb, 0xd2, [@broadcast, @private=0xa010101]}, @timestamp={0x44, 0x14, 0xcf, 0x0, 0xc, [0x8000, 0xfff, 0x5, 0xffffffff]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)={0x840, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "f08d3c"}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "bb84624f0d98067566d28678671fd376980be248d6e45711b96b26af89505f94ba961a0a2d2a7b50bd54fd34b46c141a4e732726b56ce5b6c567c8e681ac7a681b0781e2b20fa29d6c8b1973423b862bb5f766f9403a0f17805c835863352a0223f81bd51b8d55e5e71101f95c3653bd61cca3605147bf110820c3af614bafe09dd784227907e01ed96d2cb8f441dba30cca3a5904975da2db2ef6f447ba"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$&(%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x95}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab07}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@!%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':${\\/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$(#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x29}]}]}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "337f122792e52a82c4034ef360550904c6f984ede9c9b67b02acdbdcf5a76d4e71dc80d935625ec167e80a3e251c1c"}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x343137354b12fb3c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "6e67b0ff27d18d82d209c0199be660188c4254373df2a90962f1f9611b5079961f3549e2df84fa3b4bb22dfcd9f43fe612d7d8c8d7d3d5a962bae9e4ea35b76023d56751b0276a16fa5a6c29aa1642005536924ef5cd68f4a11aa66c682be19c9a6e6ec6c3858715d60c8cd3bc50eb4263dfa3cb48c037b34d8f5eaf4f2922a7ed0409f66aa2d97d32e788fd70ad6f1797da77a9fe0d7837318332e5665d12b4b9da2b015bb42b11481264071756dca0489cdfe9237771698fdd6fb6d9e8218d64c1e292c25221d974caa01c4296427717191a0a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}+,.\\&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/8%,&):'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-&,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\$\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*:_\xc1:@^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[[\\-,!]$*\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '${:,\xf1*(!\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'&,.Q.}/#]^!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',->\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ').$\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}]]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\'\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "56b1f40dc7b42177cd60ab21740bd94cf0db4126572fa89752721744e8a4c727c988cae1b0754ba3155533f061d33e9d00558705c4a1dfb553d708f7cfe1c2c13942cf1894f5654586b7c32e1b0728961f628fbbe802209d364f20a2f3ecd5fe8f34a662354d451fe425b78d5ddc56ac10e4050d7298e14f4fd885874ad3ff2268882f46b66269304949334d951e7633e465367504c0e7dc0722dd115ffa8ca7b526c6e0e43c93d5f2b3e53b91f6d7"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@/+\\(@\xf0-&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{%{]}!!\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$,}(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, ':\'\xcb&\\]{)#){\\-/\xde^\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(-@#@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xbf$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xbf$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800005}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x267d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\\\xc9@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}]]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x840}, 0x1, 0x0, 0x0, 0x44000}, 0x800) write(r1, 0x0, 0x0) 1m3.121672812s ago: executing program 6 (id=30509): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) (async) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) (async) close(r1) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf255400000008000300", @ANYRES32=r7, @ANYBLOB="0a000600036fff5a5678fdff"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m2.800397815s ago: executing program 0 (id=30513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x2004c085) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) close(r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r4, 0x8b1a, &(0x7f0000000040)) 1m2.797255626s ago: executing program 6 (id=30514): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x38, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @broadcast}}, 0x8, 0x7, 0x6, 0xdf, 0x82, 0x5, 0x86}, 0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0xa60e}, 0x8) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000180)={'vlan0\x00', 0x5}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x48, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @empty, 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xf64, @empty, 0xfffffe01}]}, &(0x7f0000000280)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008805}, 0x40) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={r1, 0x8}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={r6, 0x3}, &(0x7f0000000580)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r8, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x917}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r0, 0x6, 0xf672, 0x1}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000780)={r1, 0x80, 0x8, [0x9, 0x5, 0x3, 0x5, 0x161, 0xaa52, 0x5, 0x4766]}, &(0x7f00000007c0)=0x18) r10 = socket(0x6731bbbc781af353, 0x5, 0x8d0) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r7) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r11, 0x12, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x1c}}, 0x840) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', r9, 0x4000, r7}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xb84, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x12, 0x1b, 0x4, 0x18, 0x1, 0x24, 0x30, 0x0, 0xb, 0x6c, 0x6c, 0x5, 0x36, 0x6c, 0x4]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x4, 0x4, 0x4, 0x5, 0xf, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x0, 0x5, 0x100, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x9}, {0x5, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x4fc3, 0x9, 0x9, 0x0, 0xfff1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22c6, 0x2, 0x0, 0x0, 0xc00, 0x1951, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x7}, {0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x1}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2, 0xffff, 0x6, 0x1, 0xffff, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x9, 0xfff, 0x7, 0xfffe, 0x7, 0x1, 0x1]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0xc, 0x6, 0x36, 0x3c, 0x6, 0x6c, 0x24, 0x6, 0x5, 0x24, 0x6c, 0x5, 0x1, 0x1b, 0x6c, 0x6c, 0x0, 0x12, 0x16, 0x12, 0x16, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7, 0xd4, 0x93, 0x4, 0xa800, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xe, 0xffff, 0xffff, 0x1, 0x2, 0x611b]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x9, 0x65, 0x2, 0xa, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x6, 0x6c, 0x36, 0x4, 0x4, 0x1, 0x1, 0x48, 0x6, 0x9, 0x3, 0xc, 0x9, 0x12, 0xc, 0x5, 0x30, 0x16, 0x34, 0x24, 0x5, 0x48]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x30, 0x48, 0xb, 0x5, 0x1b, 0xc, 0x4, 0x3, 0x2, 0x49, 0x865140e3a16e8ba8, 0x6, 0x5, 0x36, 0x6, 0x48, 0x3, 0x18, 0x5, 0xc, 0x36, 0xc, 0xc, 0x1b, 0x6, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x646, 0xc, 0xe978, 0x4, 0x7, 0x8, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}]}]}, @NL80211_ATTR_TID_CONFIG={0x43c, 0x11d, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x38, 0x9, 0x6, 0x1ca5, 0xeba, 0xf, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x8, 0xff, 0xcc, 0x7, 0xff, 0x6]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x4}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {}, {0x3, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x3}, {0x6}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x5, 0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {}, {0x6, 0x7}, {0x3, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe, 0x40, 0x10, 0x1000, 0x6, 0x8, 0x7, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x5, 0x8, 0x0, 0x3, 0x88db, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x2, 0x4, 0x2, 0x12, 0x36, 0x36, 0x60, 0x18, 0x36, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x79d, 0xfd97, 0x1ff, 0x6, 0x3, 0x401]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x1}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x9}, {0x1}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x8}, {0x7}, {0x2, 0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x6}, {0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x1}, {0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0x1e}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x7, 0x2}, {0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x1}, {0x2, 0x7}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x24, 0x5, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfd, 0x7fff, 0x57, 0x8000, 0x5, 0xd, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xb47, 0x6, 0x9, 0x0, 0x0, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf1, 0x6, 0x58, 0xea0b, 0x3ff, 0x8e2, 0xe7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0xa, 0x5, 0x1, 0xc68, 0x3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {}, {0x1}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x9}, {0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x9}, {0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x8, 0x7f, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {}, {0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x0, 0x16, 0x24, 0x36, 0x3, 0x48, 0x39]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0xc, 0x4, 0x3, 0x34, 0x24, 0x1, 0x4, 0x30, 0x1, 0x16, 0x12, 0x36, 0x60, 0x1, 0x5]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0xcff6, 0x7, 0xcd, 0x2, 0x3, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x9, 0xc, 0x48, 0x18, 0x18, 0xc, 0x30, 0x18, 0x4, 0x2, 0x48, 0x48, 0x9, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x0, 0x1bd, 0x4, 0x4, 0x0, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x60, 0x3c, 0x30, 0x0, 0x1b, 0x40, 0xc, 0x30, 0xb, 0xc]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f8, 0x11d, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x12}, {0x5, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {}, {0x6, 0x4}, {0x5, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0xa}, {}, {0x7, 0x5}, {0x6, 0x3}, {0x3}, {0x3}, {0x3, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x1, 0xff, 0x0, 0xff, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x4, 0x40, 0x7, 0x7f, 0xc, 0x7fff, 0xfcf]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x5, 0x45, 0x24, 0x6, 0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x2, 0x9, 0x18, 0x1b, 0x5, 0x16, 0xb, 0x2e, 0x30, 0xca454836a47cccd6, 0x5, 0xb, 0x36, 0x30, 0x7, 0x48, 0x12, 0x0, 0x18, 0x3, 0x5, 0x18, 0x48, 0x6, 0x30, 0x44]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x9, 0x7, 0x9, 0x1, 0xb809, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x132f, 0x3, 0x2, 0x8, 0x8001, 0x5, 0x80, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x1, 0x9948, 0x6, 0x1000, 0x4, 0xa, 0x100]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x30, 0x36, 0x1, 0x4, 0x12, 0xb, 0x2c, 0x60, 0x1, 0x5, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x27, 0x5, 0x6f, 0x8, 0x800, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x48, 0x6, 0x5, 0x18, 0x6c, 0x1, 0x16, 0x58, 0x30, 0xb, 0x12, 0x34, 0x4, 0x1, 0x30, 0x0, 0x9, 0x1b, 0x6e, 0x21]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x4}, {0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x6}, {0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x9}, {0x4}, {0x0, 0xa}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x521, 0x2, 0x9, 0xffff, 0x0, 0x7, 0x67, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b4, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xc, 0x2, 0xffff, 0x8, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6ff, 0xe84, 0x4, 0x678b, 0xffff, 0x6, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff7, 0xae, 0x1ec, 0xe400, 0xe, 0x47a8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe77, 0xf, 0xbb13, 0x6, 0xdfc2, 0x5, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x24, 0x4, 0x5, 0x16, 0x60, 0x6c, 0x36, 0x6c, 0x9, 0x18, 0xb, 0x3a, 0x9, 0x5, 0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x5, 0x8001, 0x2, 0x2, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x1, 0x5}, {0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x6}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x2}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x16, 0x30, 0x48, 0x3, 0x9, 0x36, 0xb, 0x36, 0x1d, 0x48, 0x3, 0x4, 0x30, 0x2, 0xc, 0x11, 0x7d]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x400, 0x7fff, 0x8e2d, 0x8, 0x5, 0x800, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xce}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}]}]}]}, 0xb84}, 0x1, 0x0, 0x0, 0x4000054}, 0x40000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0xb8, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9584}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x805}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001800)=@int=0xfb, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)=@deltclass={0x40, 0x29, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xb, 0x5}, {0xc, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x29}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfb={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000c0}, 0x440) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x80, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x60000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4ea}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x71}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 1m2.791308599s ago: executing program 2 (id=30515): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m2.74515626s ago: executing program 6 (id=30516): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) 1m2.636592315s ago: executing program 0 (id=30517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x48015, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000200)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7, 0x0, 0x0, 0x2a}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 1m2.635860635s ago: executing program 6 (id=30518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000012f000000000000000004ffffe9280000ff0000000000009fba000000000a090000000000000020f7ffffff940073797a31000000002c000000030a010100000000000000000a0000070980010073797a35085bd4592d03de8d4e3f3278813233dfe624502ee80bf560c7b6f93b589dbdb65ebdc3253a4b0600c20ca422b1e13a13d1f341db61c15968f12808d5e020000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x9aa00, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000380)=0x2) bind$can_raw(r1, &(0x7f0000000340), 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x2404c810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r7) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000000093d739c163881080000000000000000010000070c00048008000140000000060900010073797a"], 0x2c}}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r4], 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r12, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 1m2.536081538s ago: executing program 3 (id=30519): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) recvmsg(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2, 0x0, 0x3}, 0x10) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) recvmsg(r1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2, 0x0, 0x3}, 0x10) (async) 1m2.426947233s ago: executing program 2 (id=30520): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10004011) (async) socket$unix(0x1, 0x5, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1) (async) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff020000000000000000000000000001"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x8c, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x801) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r3, 0x7800, 0x700, 0x7, 0x81, {{0xa, 0x4, 0x2, 0x1e, 0x28, 0x64, 0x0, 0x40, 0x4, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0xb, 0xd9, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x2, 0x0}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=@bridge_getneigh={0x58, 0x1e, 0x720, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x8000, 0x40020}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @IFLA_OPERSTATE={0x5, 0x10, 0x17}, @IFLA_EVENT={0x8, 0x2c, 0xfc}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_GSO_MAX_SIZE={0x64, 0x29, 0x64496}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r13 = accept4$alg(r12, 0x0, 0x0, 0x0) sendmmsg(r13, &(0x7f000000e380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x68, 0x0, 0x8, "30ab813fc10573cf089233b7dec767059338f3ff02c4047a73360300000000000000a30070ca35815d630028bda82b2fc3ad496f3fa3c66ea000714c9e442652e472f9ad0827f8f760c53402d0bab7efcbc03ed8a23545"}], 0x68}}], 0x1, 0x800) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 1m2.332282355s ago: executing program 3 (id=30521): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0xffe00) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000081c29d82680001002ddbdf21020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x50) close(0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042bbd7000f8dbdf2500000900", @ANYRES32=0x0, @ANYBLOB="8bafea1f000000001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xd1, 0x0, 0x0) recvmsg$unix(r6, &(0x7f00000004c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40012020) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x8000, 0x3a13f81f, 0x6, 0x7, 0x7}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000700aaaaaaaa9a05aaaaaaaaaabbaaaaaaaaaaaabbbbbbbbbbbb000000000000fcd8edf9f06fa3d06d3ed349"]) 1m2.301732226s ago: executing program 2 (id=30522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e001400030067656e65766531"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x804) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x3fffffffd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m2.299848917s ago: executing program 0 (id=30523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000029c5bcde9eed452000000000000e4ff0000000000c19317d9"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000200)=0x8) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e001400030067656e65766531"], 0x4c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="4ff3c74a360001000000000000000100040000806d9c2a734ac244a5ee806b6bf19bbcb55e2708d499758efb"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000080)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES8=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000020000000000000900000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000feffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'macvtap0\x00', @local}) 30.765614ms ago: executing program 3 (id=30524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000140), &(0x7f0000000840)=@tcp6, 0x1000000}, 0x20) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001500010228bd7000fedbdf2502084300bb4aa317e8b946d73ec64ed357066ece98927a6fbcb176cceac85528d638fd0945b00460e222ca7bbb86bb921eb735474500b16afbe2e54500a8bec2d5ac397998c3975bb273", @ANYRES32=0x0], 0x18}}, 0x0) 30.446179ms ago: executing program 2 (id=30525): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x128, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x55d711c4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb35}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4a8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x240480d8) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x9) 29.404911ms ago: executing program 0 (id=30526): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) socket$unix(0x1, 0x5, 0x0) 28.907881ms ago: executing program 3 (id=30527): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x7, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @empty}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000240)="31020702", 0x4}, {&(0x7f0000000540)="a49200214c2b3f2bc72b72425db113af3ffd", 0x12}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 7.189962ms ago: executing program 0 (id=30528): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f3a7b9b72c617e5eb41027a91e9d", 0xe}], 0x1}, 0x44) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000100)) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd0, &(0x7f0000000180)=""/208, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x47, 0x10, &(0x7f0000000080), 0x10}, 0x94) 4.550737ms ago: executing program 0 (id=30529): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0xfffffffe}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbffa19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f020000", 0xf}, {&(0x7f0000000740)="849a231c93", 0x5}], 0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 4.15085ms ago: executing program 2 (id=30530): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, r3, 0x3, {0x2, 0x0, 0x4}}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x15) 1.095975ms ago: executing program 3 (id=30531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 2 (id=30532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r1, 0x0, 0xdc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380"], 0x48}}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T25685] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.374257][T25975] netlink: 'syz.3.29323': attribute type 1 has an invalid length. [ 1717.382852][T25975] netlink: 'syz.3.29323': attribute type 2 has an invalid length. [ 1717.391265][T25975] netlink: 'syz.3.29323': attribute type 1 has an invalid length. [ 1717.866006][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1718.996378][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1720.106591][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1720.629397][T25992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1720.847567][T26052] syzkaller1: entered promiscuous mode [ 1720.856200][T26052] syzkaller1: entered allmulticast mode [ 1720.929269][T26055] syzkaller1: entered promiscuous mode [ 1720.973426][T26055] syzkaller1: entered allmulticast mode [ 1721.008956][T26059] netlink: 'syz.1.29345': attribute type 1 has an invalid length. [ 1721.110326][T26059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1721.138263][T26064] tipc: Started in network mode [ 1721.146222][T26064] tipc: Node identity ac14140f, cluster identity 4711 [ 1721.153358][T26064] tipc: New replicast peer: 255.255.255.255 [ 1721.160378][T26064] tipc: Enabled bearer , priority 10 [ 1721.192883][T26068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29347'. [ 1721.219521][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1721.375596][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29353'. [ 1721.385421][T26081] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1721.398049][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29353'. [ 1721.938493][T26113] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1721.959226][T26113] bond7 (unregistering): Released all slaves [ 1722.012217][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29366'. [ 1722.023081][T26124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29366'. [ 1722.093378][T26132] netlink: 'syz.0.29367': attribute type 3 has an invalid length. [ 1722.158915][T26139] tipc: Enabling of bearer rejected, failed to enable media [ 1722.173092][T26140] tipc: Enabling of bearer rejected, failed to enable media [ 1722.227627][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29371'. [ 1722.277129][T12435] tipc: Node number set to 2886997007 [ 1722.294180][T26152] tipc: Cannot configure node identity twice [ 1722.305952][T26152] netlink: 48 bytes leftover after parsing attributes in process `syz.1.29373'. [ 1722.377679][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1722.409622][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29375'. [ 1722.419182][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29375'. [ 1722.438863][T26158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1722.486653][T26160] xt_hashlimit: size too large, truncated to 1048576 [ 1722.677601][T26173] syzkaller0: entered promiscuous mode [ 1722.683128][T26173] syzkaller0: entered allmulticast mode [ 1722.920872][T26182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29382'. [ 1722.955029][T26182] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1722.966240][T12448] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1723.324150][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29390'. [ 1723.423965][T26211] bond12: option xmit_hash_policy: invalid value (64) [ 1723.438430][T26211] bond12 (unregistering): Released all slaves [ 1723.499498][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1723.682940][T26233] netlink: 'syz.2.29402': attribute type 10 has an invalid length. [ 1723.708208][T26233] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1723.849559][T26239] netlink: 'syz.0.29404': attribute type 178 has an invalid length. [ 1724.026351][T26252] bond0: (slave bond_slave_1): Releasing backup interface [ 1724.261863][T26256] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1724.480509][T26256] vlan0: left allmulticast mode [ 1724.499112][T26256] veth0_vlan: left allmulticast mode [ 1724.508478][T26256] vlan0: left promiscuous mode [ 1724.521194][T26256] macvtap1: left promiscuous mode [ 1724.534708][T26256] macvtap1: left allmulticast mode [ 1724.562334][T26256] bond1: left promiscuous mode [ 1724.575691][T26256] bond1: left allmulticast mode [ 1724.601863][T25669] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.630311][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1724.654080][T25669] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.734476][T26279] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1724.765736][T25669] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.778162][T25669] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.013845][T26297] netlink: 'syz.3.29422': attribute type 1 has an invalid length. [ 1725.068823][T26297] bond4: option mode: invalid value (8) [ 1725.076824][T26297] bond4 (unregistering): Released all slaves [ 1725.149581][T26297] : renamed from dummy0 [ 1725.320849][T26320] syzkaller0: entered promiscuous mode [ 1725.331863][T26320] syzkaller0: entered allmulticast mode [ 1725.517266][T26333] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1725.525988][T26333] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1725.537872][T26333] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1725.694286][T26348] netlink: 'syz.0.29443': attribute type 3 has an invalid length. [ 1725.703935][T26348] netlink: 'syz.0.29443': attribute type 3 has an invalid length. [ 1725.756353][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1725.861396][T26354] netlink: 'syz.0.29444': attribute type 1 has an invalid length. [ 1726.141948][T26373] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1726.156226][T26373] netlink: 'syz.3.29453': attribute type 1 has an invalid length. [ 1726.471486][T26392] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1726.481007][T26392] __nla_validate_parse: 12 callbacks suppressed [ 1726.481026][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29461'. [ 1726.525841][T26396] netlink: 'syz.2.29462': attribute type 1 has an invalid length. [ 1726.545928][T26396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1726.555949][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29462'. [ 1726.735953][T26403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1726.799665][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29465'. [ 1726.926715][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1726.961602][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29466'. [ 1727.076342][T26419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29469'. [ 1727.286960][T26428] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.29469'. [ 1728.085940][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1728.936786][T25685] wlan1: Trigger new scan to find an IBSS to join [ 1729.205582][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1729.861527][T26413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1730.251046][T26468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29481'. [ 1730.315267][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1730.459945][T26471] netlink: 68 bytes leftover after parsing attributes in process `syz.3.29482'. [ 1730.488765][T26471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29482'. [ 1730.604831][T26482] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1730.660149][T26484] netlink: 'syz.1.29487': attribute type 1 has an invalid length. [ 1730.689137][T26488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29489'. [ 1730.774344][T26484] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1730.786174][T26489] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1730.819322][T26492] bond12: entered promiscuous mode [ 1730.833823][T26493] macvlan2: entered promiscuous mode [ 1730.840560][T26493] macvlan2: entered allmulticast mode [ 1730.847798][T26493] bond7: entered promiscuous mode [ 1730.854070][T26493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1730.862121][T26493] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1730.909006][T26493] bond7: left promiscuous mode [ 1730.953960][T26492] macvlan5: entered promiscuous mode [ 1730.960877][T26492] macvlan5: entered allmulticast mode [ 1730.968374][T26492] bond12: (slave macvlan5): Opening slave failed [ 1731.070472][T26504] FAULT_INJECTION: forcing a failure. [ 1731.070472][T26504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.084961][T26504] CPU: 1 UID: 0 PID: 26504 Comm: syz.0.29493 Not tainted syzkaller #0 PREEMPT(full) [ 1731.084989][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1731.085001][T26504] Call Trace: [ 1731.085008][T26504] [ 1731.085016][T26504] dump_stack_lvl+0xe8/0x150 [ 1731.085042][T26504] should_fail_ex+0x40c/0x560 [ 1731.085064][T26504] _copy_from_iter+0x1d3/0x1660 [ 1731.085087][T26504] ? rcu_is_watching+0x15/0xb0 [ 1731.085110][T26504] ? __pfx__copy_from_iter+0x10/0x10 [ 1731.085131][T26504] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1731.085159][T26504] ? netlink_sendmsg+0x650/0xb40 [ 1731.085186][T26504] ? skb_put+0x112/0x210 [ 1731.085210][T26504] netlink_sendmsg+0x6c0/0xb40 [ 1731.085239][T26504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.085262][T26504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1731.085282][T26504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1731.085303][T26504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.085330][T26504] ____sys_sendmsg+0x9b9/0xa20 [ 1731.085360][T26504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1731.085387][T26504] ? lock_release+0x4b/0x3c0 [ 1731.085414][T26504] ? import_iovec+0x73/0xa0 [ 1731.085439][T26504] ___sys_sendmsg+0x2a5/0x360 [ 1731.085466][T26504] ? __pfx____sys_sendmsg+0x10/0x10 [ 1731.085509][T26504] ? __fget_files+0x2a/0x420 [ 1731.085529][T26504] ? __fget_files+0x3a2/0x420 [ 1731.085553][T26504] __x64_sys_sendmsg+0x1b1/0x290 [ 1731.085578][T26504] ? do_raw_spin_unlock+0xf5/0x210 [ 1731.085601][T26504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1731.085631][T26504] ? handle_softirqs+0x70f/0x840 [ 1731.085655][T26504] ? rcu_is_watching+0x15/0xb0 [ 1731.085674][T26504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.085694][T26504] do_syscall_64+0x174/0x580 [ 1731.085720][T26504] ? clear_bhb_loop+0x40/0x90 [ 1731.085749][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.085767][T26504] RIP: 0033:0x7f235899ce59 [ 1731.085784][T26504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.085800][T26504] RSP: 002b:00007f2359788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1731.085820][T26504] RAX: ffffffffffffffda RBX: 00007f2358c15fa0 RCX: 00007f235899ce59 [ 1731.085834][T26504] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1731.085846][T26504] RBP: 00007f2359788090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.085858][T26504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.085869][T26504] R13: 00007f2358c16038 R14: 00007f2358c15fa0 R15: 00007fff2a9e6e38 [ 1731.085887][T26504] [ 1731.530470][T26519] __nla_validate_parse: 6 callbacks suppressed [ 1731.530489][T26519] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.29476'. [ 1731.547807][T26522] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1731.548206][T26519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1731.580938][T26517] netlink: 'syz.5.29499': attribute type 24 has an invalid length. [ 1731.600057][T26524] macsec0: left allmulticast mode [ 1731.618605][T26524] netlink: 'syz.1.29501': attribute type 1 has an invalid length. [ 1731.700456][T26524] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1731.715965][T26528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29502'. [ 1731.733549][T26524] netlink: 300 bytes leftover after parsing attributes in process `syz.1.29501'. [ 1731.744009][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1731.763071][T26527] bond7: (slave veth0_to_bond): Releasing active interface [ 1731.778585][T26534] netlink: 'syz.0.29503': attribute type 9 has an invalid length. [ 1731.779303][T26527] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1731.800039][T26530] netlink: 'syz.3.29504': attribute type 1 has an invalid length. [ 1731.822332][T26535] sctp: [Deprecated]: syz.2.29502 (pid 26535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1731.822332][T26535] Use struct sctp_sack_info instead [ 1731.877881][T26530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1731.937324][T26540] bond4: (slave veth0_to_bond): making interface the new active one [ 1731.948340][T26540] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1732.002627][T26543] Bluetooth: MGMT ver 1.23 [ 1732.011542][T26530] macvlan2: entered promiscuous mode [ 1732.018314][T26530] macvlan2: entered allmulticast mode [ 1732.027072][T26530] bond4: entered promiscuous mode [ 1732.032743][T26530] veth0_to_bond: entered promiscuous mode [ 1732.041615][T26530] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1732.052208][T26530] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1732.072103][T26530] bond4: left promiscuous mode [ 1732.078387][T26530] veth0_to_bond: left promiscuous mode [ 1732.341336][T26569] netlink: 'syz.1.29516': attribute type 9 has an invalid length. [ 1732.676285][T26588] netlink: 'syz.3.29524': attribute type 1 has an invalid length. [ 1732.731891][T26588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1732.744583][T12433] IPVS: starting estimator thread 0... [ 1732.764704][T26592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29525'. [ 1732.777448][T26588] bond4: (slave veth0_to_bond): Releasing active interface [ 1732.792931][T26588] bond5: (slave veth0_to_bond): making interface the new active one [ 1732.803557][T26588] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1732.834379][T26597] netlink: 'syz.1.29526': attribute type 1 has an invalid length. [ 1732.845774][T26594] IPVS: using max 41 ests per chain, 98400 per kthread [ 1732.864799][T31186] wlan1: Trigger new scan to find an IBSS to join [ 1732.873840][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1732.908972][T26593] macvlan2: entered promiscuous mode [ 1732.916906][T26593] macvlan2: entered allmulticast mode [ 1732.924556][T26593] bond5: entered promiscuous mode [ 1732.931648][T26593] veth0_to_bond: entered promiscuous mode [ 1732.944573][T26593] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1732.955224][T26593] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1732.973208][T26593] bond5: left promiscuous mode [ 1732.979136][T26593] veth0_to_bond: left promiscuous mode [ 1732.992530][T26601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29525'. [ 1733.042074][T26611] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.29528'. [ 1733.054267][T26611] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.29528'. [ 1733.057203][T26615] netlink: 'syz.1.29529': attribute type 9 has an invalid length. [ 1733.167848][T26619] netlink: 'syz.5.29532': attribute type 1 has an invalid length. [ 1733.193441][T26619] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1733.392300][T26644] mac80211_hwsim hwsim138 syzkaller0: entered promiscuous mode [ 1733.419952][T26641] xt_hashlimit: size too large, truncated to 1048576 [ 1733.426470][T26644] mac80211_hwsim hwsim138 syzkaller0: entered allmulticast mode [ 1733.669488][T26666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29544'. [ 1733.800946][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29546'. [ 1733.920971][T26678] netlink: 'syz.0.29547': attribute type 1 has an invalid length. [ 1733.984948][T26678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1734.030296][T26678] macvlan3: entered promiscuous mode [ 1734.037864][T26678] macvlan3: entered allmulticast mode [ 1734.046174][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1734.051182][T26678] bond2: entered promiscuous mode [ 1734.063525][T26678] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1734.080764][T26678] bond2: left promiscuous mode [ 1734.129220][T26693] ipt_ECN: cannot use operation on non-tcp rule [ 1734.162322][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29552'. [ 1734.347932][T26693] bond3: Setting coupled_control to off (0) [ 1734.510614][T26719] xt_hashlimit: invalid rate [ 1734.639291][T26723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.662755][T26723] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1734.782028][T26723] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1734.792891][T26723] bond0 (unregistering): Released all slaves [ 1734.804457][T26732] vlan2: left allmulticast mode [ 1734.810723][T26732] bridge_slave_0: left allmulticast mode [ 1734.819205][T26732] vlan2: left promiscuous mode [ 1734.824050][T26732] bridge_slave_0: left promiscuous mode [ 1734.830492][T26732] bridge0: port 3(vlan2) entered disabled state [ 1734.896970][T26749] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1734.931965][T26745] bond5: (slave veth0_to_bond): Releasing active interface [ 1734.945964][T25669] wlan1: Creating new IBSS network, BSSID ba:66:bf:23:f4:d3 [ 1734.982118][T26745] bond6: (slave veth0_to_bond): making interface the new active one [ 1734.992253][T26745] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1735.004405][T26752] team0: Device xfrm0 is of different type [ 1735.034007][T26749] macvlan2: entered promiscuous mode [ 1735.040431][T26749] macvlan2: entered allmulticast mode [ 1735.048822][T26749] bond6: entered promiscuous mode [ 1735.054894][T26749] veth0_to_bond: entered promiscuous mode [ 1735.106014][T26749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1735.138476][T26749] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1735.166255][T26749] bond6: left promiscuous mode [ 1735.171273][T26749] veth0_to_bond: left promiscuous mode [ 1735.187004][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1735.301678][T26769] bond8: (slave veth0_to_bond): Releasing backup interface [ 1735.320840][T26769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1735.348007][T26776] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1735.539326][T26794] ip6gre1: entered allmulticast mode [ 1735.640221][T26807] bridge5: entered promiscuous mode [ 1735.645495][T26807] bridge5: entered allmulticast mode [ 1735.653468][T26807] team0: Port device bridge5 added [ 1735.659124][T26807] bridge0: port 1(team0) entered blocking state [ 1735.665483][T26807] bridge0: port 1(team0) entered disabled state [ 1735.671948][T26807] team0: entered allmulticast mode [ 1735.678520][T26807] team0: entered promiscuous mode [ 1735.832490][T26824] tipc: Enabling of bearer rejected, failed to enable media [ 1735.892936][T26830] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 1735.954322][T26835] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001 [ 1736.149250][T25683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.169704][T26852] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1736.186681][T25683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.204053][T25683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.234640][T25683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.655595][T26873] macvtap1: entered promiscuous mode [ 1736.677079][T26873] vlan0: entered promiscuous mode [ 1736.678548][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1736.703815][T26873] macvtap1: entered allmulticast mode [ 1736.726964][T26873] vlan0: entered allmulticast mode [ 1736.743868][T26873] veth0_vlan: entered allmulticast mode [ 1736.761564][T26879] tunl0: entered promiscuous mode [ 1736.768380][T26879] validate_nla: 10 callbacks suppressed [ 1736.768414][T26879] netlink: 'syz.2.29608': attribute type 4 has an invalid length. [ 1736.796025][T26879] __nla_validate_parse: 5 callbacks suppressed [ 1736.796044][T26879] netlink: 9 bytes leftover after parsing attributes in process `syz.2.29608'. [ 1736.931892][T26890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29611'. [ 1737.158460][T26903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1737.159642][T26905] ipt_ECN: cannot use operation on non-tcp rule [ 1737.166290][T26903] IPv6: NLM_F_CREATE should be set when creating new route [ 1737.166354][T26903] IPv6: NLM_F_CREATE should be set when creating new route [ 1737.228225][T26896] netlink: 'syz.3.29612': attribute type 3 has an invalid length. [ 1737.272679][T26905] netlink: 'syz.2.29617': attribute type 4 has an invalid length. [ 1737.309008][T26908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29616'. [ 1737.402799][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29621'. [ 1737.463114][T26926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29622'. [ 1737.472796][T26926] ip6gretap0: entered allmulticast mode [ 1737.551263][T26931] netlink: 'syz.1.29624': attribute type 19 has an invalid length. [ 1737.855662][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1738.967021][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1740.076932][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1740.260360][T26912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1740.400852][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29637'. [ 1740.417132][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29636'. [ 1740.437221][T26964] netlink: 'syz.1.29636': attribute type 7 has an invalid length. [ 1740.445914][T26970] netlink: 'syz.3.29639': attribute type 9 has an invalid length. [ 1740.453964][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29638'. [ 1740.454132][T26964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29636'. [ 1740.514565][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29636'. [ 1740.535298][T26964] netlink: 'syz.1.29636': attribute type 7 has an invalid length. [ 1740.599487][T26977] netlink: 'syz.3.29640': attribute type 1 has an invalid length. [ 1740.642372][T26977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1740.707482][T26977] bond6: (slave veth0_to_bond): Releasing active interface [ 1740.743201][T26977] bond7: (slave veth0_to_bond): making interface the new active one [ 1740.756711][T26977] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1740.821038][T26979] macvlan2: entered promiscuous mode [ 1740.827864][T26979] macvlan2: entered allmulticast mode [ 1740.834131][T26979] bond7: entered promiscuous mode [ 1740.849922][T26979] veth0_to_bond: entered promiscuous mode [ 1740.874173][T26979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1740.892145][T26979] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1740.937878][T26979] bond7: left promiscuous mode [ 1740.951579][T26979] veth0_to_bond: left promiscuous mode [ 1741.041261][T27000] ipvlan2: entered allmulticast mode [ 1741.074191][T27000] batadv_slave_1: entered allmulticast mode [ 1741.106246][T27000] batman_adv: batadv0: Adding interface: ipvlan2 [ 1741.115848][T27000] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.220541][T27000] batman_adv: batadv0: Interface activated: ipvlan2 [ 1741.234561][T27007] netlink: 'syz.0.29646': attribute type 3 has an invalid length. [ 1741.244057][T27007] netlink: 'syz.0.29646': attribute type 3 has an invalid length. [ 1741.252761][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1741.293719][T25669] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.321371][T25669] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.362827][T25669] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.389689][T27021] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1741.402420][T27021] bond4 (unregistering): Released all slaves [ 1741.469561][T25669] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.972688][T27069] validate_nla: 2 callbacks suppressed [ 1741.972708][T27069] netlink: 'syz.5.29665': attribute type 1 has an invalid length. [ 1742.008101][T27071] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1742.103953][T27069] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1742.123503][T27084] __nla_validate_parse: 4 callbacks suppressed [ 1742.123522][T27084] netlink: 68 bytes leftover after parsing attributes in process `syz.3.29670'. [ 1742.139986][T27082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1742.157917][T27084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29670'. [ 1742.340292][T27091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29674'. [ 1742.356510][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1742.401865][T27091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29674'. [ 1742.533340][T27104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29679'. [ 1742.569098][T27107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29680'. [ 1742.587668][T27104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29679'. [ 1742.597446][T27104] netlink: 2 bytes leftover after parsing attributes in process `syz.0.29679'. [ 1742.606722][T27104] veth1_to_bridge: entered allmulticast mode [ 1742.613010][T27104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29679'. [ 1742.625889][T27104] netlink: 2 bytes leftover after parsing attributes in process `syz.0.29679'. [ 1742.647174][T27110] xt_connbytes: Forcing CT accounting to be enabled [ 1742.660254][T27110] xt_bpf: check failed: parse error [ 1742.759956][T27114] tipc: Started in network mode [ 1742.777577][T27114] tipc: Node identity 226356cd1284, cluster identity 4711 [ 1742.794168][T27114] tipc: Enabled bearer , priority 0 [ 1742.810811][T27114] syzkaller0: entered promiscuous mode [ 1742.816682][T27114] syzkaller0: entered allmulticast mode [ 1742.857184][T27123] netlink: 'syz.0.29686': attribute type 1 has an invalid length. [ 1742.869706][T27114] tipc: Resetting bearer [ 1742.878164][T27113] tipc: Resetting bearer [ 1742.927241][T27113] tipc: Disabling bearer [ 1742.994174][T27123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.092528][T27123] bond0: (slave gretap1): making interface the new active one [ 1743.136938][T27123] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1743.174193][T27145] FAULT_INJECTION: forcing a failure. [ 1743.174193][T27145] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.202516][T27145] CPU: 1 UID: 0 PID: 27145 Comm: syz.2.29691 Not tainted syzkaller #0 PREEMPT(full) [ 1743.202546][T27145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1743.202558][T27145] Call Trace: [ 1743.202565][T27145] [ 1743.202575][T27145] dump_stack_lvl+0xe8/0x150 [ 1743.202600][T27145] should_fail_ex+0x40c/0x560 [ 1743.202624][T27145] should_failslab+0xa8/0x100 [ 1743.202652][T27145] __kmalloc_noprof+0xe8/0x750 [ 1743.202677][T27145] ? iovec_from_user+0x87/0x250 [ 1743.202703][T27145] iovec_from_user+0x87/0x250 [ 1743.202729][T27145] __import_iovec+0x15e/0x7e0 [ 1743.202755][T27145] ? rcu_is_watching+0x15/0xb0 [ 1743.202784][T27145] ? lock_release+0x4b/0x3c0 [ 1743.202813][T27145] import_iovec+0x73/0xa0 [ 1743.202839][T27145] ___sys_recvmsg+0x4c9/0x5a0 [ 1743.202871][T27145] ? __pfx____sys_recvmsg+0x10/0x10 [ 1743.202900][T27145] ? __fget_files+0x2a/0x420 [ 1743.202921][T27145] ? rcu_is_watching+0x15/0xb0 [ 1743.202947][T27145] ? __fget_files+0x3a2/0x420 [ 1743.202973][T27145] do_recvmmsg+0x31a/0x7f0 [ 1743.203004][T27145] ? __pfx_do_recvmmsg+0x10/0x10 [ 1743.203037][T27145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1743.203065][T27145] ? __fget_files+0x3a2/0x420 [ 1743.203091][T27145] __x64_sys_recvmmsg+0x198/0x250 [ 1743.203120][T27145] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1743.203150][T27145] ? rcu_is_watching+0x15/0xb0 [ 1743.203170][T27145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.203189][T27145] do_syscall_64+0x174/0x580 [ 1743.203213][T27145] ? trace_irq_disable+0x3b/0x140 [ 1743.203239][T27145] ? clear_bhb_loop+0x40/0x90 [ 1743.203260][T27145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.203277][T27145] RIP: 0033:0x7efc4d39ce59 [ 1743.203295][T27145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.203312][T27145] RSP: 002b:00007efc4e1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1743.203334][T27145] RAX: ffffffffffffffda RBX: 00007efc4d615fa0 RCX: 00007efc4d39ce59 [ 1743.203348][T27145] RDX: 0000000000000001 RSI: 0000200000007d80 RDI: 0000000000000003 [ 1743.203361][T27145] RBP: 00007efc4e1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.203374][T27145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.203386][T27145] R13: 00007efc4d616038 R14: 00007efc4d615fa0 R15: 00007ffeff894c38 [ 1743.203409][T27145] [ 1743.535562][T27150] netlink: 'syz.5.29694': attribute type 2 has an invalid length. [ 1743.571184][T27155] netlink: 'syz.2.29696': attribute type 10 has an invalid length. [ 1743.611848][T27155] team0: left allmulticast mode [ 1743.616781][T27155] team0: left promiscuous mode [ 1743.621947][T27155] bridge0: port 1(team0) entered disabled state [ 1743.728153][T27172] netlink: 'syz.0.29700': attribute type 9 has an invalid length. [ 1743.768602][T27173] netlink: 'syz.3.29699': attribute type 12 has an invalid length. [ 1743.778095][T27173] netlink: 'syz.3.29699': attribute type 29 has an invalid length. [ 1743.786262][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1743.830028][T27182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1743.840570][T27175] netlink: 'syz.5.29703': attribute type 1 has an invalid length. [ 1743.890476][T27175] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1744.032623][T27198] syzkaller0: entered promiscuous mode [ 1744.038162][T27198] syzkaller0: entered allmulticast mode [ 1744.131187][T27200] syzkaller0: mtu less than device minimum [ 1744.137552][T27210] netlink: zone id is out of range [ 1744.142769][T27210] netlink: zone id is out of range [ 1744.147897][T27210] netlink: zone id is out of range [ 1744.153031][T27210] netlink: zone id is out of range [ 1744.158131][T27210] netlink: zone id is out of range [ 1744.163243][T27210] netlink: zone id is out of range [ 1744.168339][T27210] netlink: zone id is out of range [ 1744.174675][T27210] nbd: must specify an index to disconnect [ 1744.180604][T27211] nbd: must specify an index to disconnect [ 1744.254739][T27213] netlink: 'syz.0.29711': attribute type 9 has an invalid length. [ 1744.313928][T27217] netlink: 'syz.0.29713': attribute type 1 has an invalid length. [ 1744.357850][T27217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1744.393103][T27217] macvlan4: entered promiscuous mode [ 1744.400018][T27217] macvlan4: entered allmulticast mode [ 1744.409967][T27217] bond3: entered promiscuous mode [ 1744.417582][T27217] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1744.427653][T27217] bond3: left promiscuous mode [ 1744.482394][T27229] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1744.579739][T27232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1744.676956][T27239] tipc: Started in network mode [ 1744.681996][T27239] tipc: Node identity 4206432d480f, cluster identity 4711 [ 1744.690472][T27239] tipc: Enabled bearer , priority 0 [ 1744.698412][T27239] syzkaller0: entered promiscuous mode [ 1744.703996][T27239] syzkaller0: entered allmulticast mode [ 1744.711737][T27239] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1744.724027][T27239] tipc: Resetting bearer [ 1744.733160][T27238] tipc: Resetting bearer [ 1744.743495][T27238] tipc: Disabling bearer [ 1745.006962][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1745.194791][T27265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1745.221716][T27272] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1745.270950][T27273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1745.292679][T27265] macvlan2: entered promiscuous mode [ 1745.306815][T27265] macvlan2: entered allmulticast mode [ 1745.316164][T27265] bond4: entered promiscuous mode [ 1745.323017][T27265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1745.333265][T27265] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1745.354113][T27265] bond4: left promiscuous mode [ 1745.379580][T27280] bridge0: port 3(vlan2) entered blocking state [ 1745.387583][T27280] bridge0: port 3(vlan2) entered disabled state [ 1745.395889][T27280] vlan2: entered allmulticast mode [ 1745.402330][T27280] vlan2: entered promiscuous mode [ 1745.588738][T27282] syzkaller0: entered promiscuous mode [ 1745.594369][T27282] syzkaller0: entered allmulticast mode [ 1745.819394][T27309] gtp0: entered promiscuous mode [ 1745.824906][T27309] gtp0: entered allmulticast mode [ 1746.061947][T27324] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1746.091040][T27324] bond7: (slave veth0_to_bond): Releasing active interface [ 1746.104600][T27324] bond8: (slave veth0_to_bond): making interface the new active one [ 1746.117355][T27324] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1746.136407][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1746.140348][T27324] macvlan2: entered promiscuous mode [ 1746.149700][T27324] macvlan2: entered allmulticast mode [ 1746.156499][T27324] bond8: entered promiscuous mode [ 1746.161662][T27324] veth0_to_bond: entered promiscuous mode [ 1746.168210][T27324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1746.177828][T27324] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1746.194702][T27324] bond8: left promiscuous mode [ 1746.199788][T27324] veth0_to_bond: left promiscuous mode [ 1746.247906][T27334] xt_ecn: cannot match TCP bits for non-tcp packets [ 1746.568036][T27349] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1746.578075][T27349] bridge0: port 4(bond9) entered blocking state [ 1746.585711][T27349] bridge0: port 4(bond9) entered disabled state [ 1746.594879][T27349] bond9: entered allmulticast mode [ 1746.605928][T27349] bond9: entered promiscuous mode [ 1746.753673][T27360] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1746.824867][T27360] macvlan2: entered promiscuous mode [ 1746.848048][T27360] macvlan2: entered allmulticast mode [ 1746.868365][T27360] bond10: entered promiscuous mode [ 1746.877086][T27360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1746.894495][T27360] bond10: left promiscuous mode [ 1746.955661][T27368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1747.267358][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1747.327371][T27393] validate_nla: 12 callbacks suppressed [ 1747.327390][T27393] netlink: 'syz.3.29764': attribute type 3 has an invalid length. [ 1747.339290][T27392] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1747.403507][T27390] netlink: 'syz.3.29764': attribute type 3 has an invalid length. [ 1747.424363][T27390] __nla_validate_parse: 16 callbacks suppressed [ 1747.424383][T27390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.29764'. [ 1747.435613][T27393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.29764'. [ 1747.474169][T27393] netlink: 'syz.3.29764': attribute type 16 has an invalid length. [ 1747.495021][T27394] netlink: 'syz.3.29764': attribute type 16 has an invalid length. [ 1747.510196][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29769'. [ 1747.527893][T27394] netlink: 'syz.3.29764': attribute type 17 has an invalid length. [ 1747.528066][T27390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29764'. [ 1747.555970][T27393] netlink: 'syz.3.29764': attribute type 17 has an invalid length. [ 1747.611151][T27406] macvtap2: entered promiscuous mode [ 1747.617049][T27406] macvtap2: entered allmulticast mode [ 1747.677317][T27393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.684533][T27393] bridge0: port 2(bridge_slave_1) entered listening state [ 1747.691896][T27393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.699054][T27393] bridge0: port 1(bridge_slave_0) entered listening state [ 1747.786826][T27393] syzkaller0: left promiscuous mode [ 1747.792383][T27393] syzkaller0: left allmulticast mode [ 1747.801765][T27393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1747.841081][T27393] bond2: left promiscuous mode [ 1747.847149][T27393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1747.854960][T27393] bond3: left promiscuous mode [ 1747.861209][T27393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1747.873294][T27393] bridge0: port 3(vlan2) entered blocking state [ 1747.879703][T27393] bridge0: port 3(vlan2) entered listening state [ 1747.933224][T27408] team0: Port device xfrm0 added [ 1748.042939][T27421] net_ratelimit: 55 callbacks suppressed [ 1748.042961][T27421] openvswitch: netlink: IP tunnel dst address not specified [ 1748.064686][T27421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1748.159733][T27428] netlink: 'syz.3.29777': attribute type 1 has an invalid length. [ 1748.204214][T27428] bond8: (slave veth0_to_bond): Releasing active interface [ 1748.304480][T27439] netlink: 'syz.3.29780': attribute type 1 has an invalid length. [ 1748.316360][T27429] netlink: 'syz.5.29779': attribute type 3 has an invalid length. [ 1748.346712][T27439] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1748.374186][T27439] bond11: (slave gretap1): making interface the new active one [ 1748.384364][T27439] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1748.399364][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1748.438250][T27444] netlink: 68 bytes leftover after parsing attributes in process `syz.5.29781'. [ 1748.450461][T27444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.29781'. [ 1748.598179][T27452] netlink: 'syz.0.29782': attribute type 6 has an invalid length. [ 1748.711082][T27457] netlink: 80 bytes leftover after parsing attributes in process `syz.5.29787'. [ 1748.767834][T27457] netlink: 80 bytes leftover after parsing attributes in process `syz.5.29787'. [ 1748.852167][T27457] netlink: 80 bytes leftover after parsing attributes in process `syz.5.29787'. [ 1748.899981][T27474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29790'. [ 1749.009299][T27477] bond5: entered promiscuous mode [ 1749.027786][T27477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1749.226519][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.256216][T27489] bridge_slave_1 (unregistering): left allmulticast mode [ 1749.263949][T27489] bridge_slave_1 (unregistering): left promiscuous mode [ 1749.273186][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.536487][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1749.614712][T27456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.656458][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1750.846676][T27564] openvswitch: netlink: Flow key attr not present in new flow. [ 1751.776719][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1752.742340][T27530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1752.878314][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1752.947275][T27577] __nla_validate_parse: 35 callbacks suppressed [ 1752.947297][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29820'. [ 1753.001063][T27579] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1753.021715][T27579] bond16 (unregistering): Released all slaves [ 1753.100534][T27585] macvtap0: entered allmulticast mode [ 1753.133681][T27585] veth0_macvtap: entered allmulticast mode [ 1753.447178][T27603] xfrm0: entered promiscuous mode [ 1753.458414][T27603] team0: Device xfrm0 is of different type [ 1753.458511][T27605] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1753.622387][T27614] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1753.657707][T27620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.29834'. [ 1753.707918][T27625] syzkaller0: entered promiscuous mode [ 1753.713481][T27625] syzkaller0: entered allmulticast mode [ 1753.722298][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29837'. [ 1753.746813][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29837'. [ 1753.931333][T27642] validate_nla: 1 callbacks suppressed [ 1753.931369][T27642] netlink: 'syz.2.29839': attribute type 1 has an invalid length. [ 1753.957966][T27642] netlink: 244 bytes leftover after parsing attributes in process `syz.2.29839'. [ 1754.002950][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1754.024524][T27645] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1754.038489][T27645] bond16 (unregistering): Released all slaves [ 1754.063465][T27639] netlink: 80 bytes leftover after parsing attributes in process `syz.2.29839'. [ 1754.179813][T27653] team0: Device xfrm0 is of different type [ 1754.252950][T27658] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1754.438326][T27662] IPv6: sit1: Disabled Multicast RS [ 1754.547651][T27676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29846'. [ 1754.583460][T27676] netlink: 13 bytes leftover after parsing attributes in process `syz.0.29846'. [ 1754.594911][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29845'. [ 1754.825957][T27675] geneve2: left promiscuous mode [ 1754.848315][T27675] bond5: left promiscuous mode [ 1754.853136][T27675] vti0: left promiscuous mode [ 1754.864160][T27675] gtp0: left promiscuous mode [ 1754.868874][T27675] gtp0: left allmulticast mode [ 1754.929102][T27675] veth3: left allmulticast mode [ 1754.951082][T27675] bond10: left promiscuous mode [ 1755.012330][T27675] bond12: left promiscuous mode [ 1755.053980][T27676] veth3: entered promiscuous mode [ 1755.063397][T31194] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.072850][T31194] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.083344][T31194] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 52283 - 0 [ 1755.116725][T25682] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.137058][T25682] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.156409][T25682] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 52283 - 0 [ 1755.167849][T25682] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.178034][T25682] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.188726][T25682] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 52283 - 0 [ 1755.219722][T25681] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.231760][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1755.240130][T25681] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.250610][T25681] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 52283 - 0 [ 1755.300659][T27704] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1755.516721][T27717] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1755.950399][T27737] netlink: 830 bytes leftover after parsing attributes in process `syz.5.29861'. [ 1756.076547][T27743] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1756.153784][T27748] openvswitch: netlink: Flow actions attr not present in new flow. [ 1756.208109][T27752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1756.222007][T27752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1756.233184][T27752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1756.244381][T27752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1756.260743][T27752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1756.358586][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1756.581310][T27772] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1756.822925][T27794] ip6gretap0: left allmulticast mode [ 1756.860636][T27794] veth1_to_bridge: left allmulticast mode [ 1756.943349][T27794] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1757.048867][T27794] ipvlan2: left allmulticast mode [ 1757.059629][T27794] batadv_slave_1: left allmulticast mode [ 1757.495876][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1757.917191][T27794] gtp0: left promiscuous mode [ 1757.925511][T27794] gtp0: left allmulticast mode [ 1757.944740][T27794] veth3: left promiscuous mode [ 1757.950967][T25681] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.976041][T25681] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.000584][T27820] __nla_validate_parse: 5 callbacks suppressed [ 1758.000618][T27820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29876'. [ 1758.032961][T25681] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.078994][T25681] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.079872][T27837] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1758.136419][T27751] lo speed is unknown, defaulting to 1000 [ 1758.170400][T27751] lo speed is unknown, defaulting to 1000 [ 1758.239006][T27843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29882'. [ 1758.251668][T27843] netlink: 'syz.3.29882': attribute type 2 has an invalid length. [ 1758.265947][T27840] tipc: Failed to remove unknown binding: 66,1,1/0:4213009382/4213009384 [ 1758.278000][T27850] netlink: 'syz.2.29884': attribute type 10 has an invalid length. [ 1758.279245][T27849] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 1758.295674][ T5630] Bluetooth: hci0: command tx timeout [ 1758.310843][T27843] netlink: 'syz.3.29882': attribute type 8 has an invalid length. [ 1758.318924][T27843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29882'. [ 1758.321155][T27850] ipvlan0: entered allmulticast mode [ 1758.342259][T27850] team0: Device ipvlan0 failed to register rx_handler [ 1758.394920][T27854] syzkaller0: entered promiscuous mode [ 1758.401886][T27854] syzkaller0: entered allmulticast mode [ 1758.617170][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1758.742577][T27876] xt_recent: Unsupported userspace flags (000000b1) [ 1759.025758][T27751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.032966][T27751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.040554][T27751] bridge_slave_0: entered allmulticast mode [ 1759.048202][T27751] bridge_slave_0: entered promiscuous mode [ 1759.056978][T27751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.064218][T27751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.071789][T27751] bridge_slave_1: entered allmulticast mode [ 1759.085947][T27751] bridge_slave_1: entered promiscuous mode [ 1759.171259][T27751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.212681][T27751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.302294][T27896] xt_hashlimit: size too large, truncated to 1048576 [ 1759.313129][T27751] team0: Port device team_slave_0 added [ 1759.343509][T27751] team0: Port device team_slave_1 added [ 1759.430304][T27751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.458535][T27751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.549173][T27751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.590179][T27751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.614409][T27751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.660083][T27751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.687528][T27910] IPVS: length: 70 != 792 [ 1759.757272][T27912] netlink: 244 bytes leftover after parsing attributes in process `syz.2.29898'. [ 1759.770047][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1759.794254][T27751] hsr_slave_0: entered promiscuous mode [ 1759.807664][T27751] hsr_slave_1: entered promiscuous mode [ 1759.822245][T27751] debugfs: 'hsr0' already exists in 'hsr' [ 1759.833415][T27751] Cannot create hsr debugfs directory [ 1759.842218][T27909] netlink: 'syz.0.29896': attribute type 3 has an invalid length. [ 1759.861959][T27909] netlink: 666 bytes leftover after parsing attributes in process `syz.0.29896'. [ 1759.948765][T27924] bond4: (slave veth0_to_bond): Releasing active interface [ 1759.989822][T27924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1760.085442][T27929] syzkaller0: left promiscuous mode [ 1760.111380][T27931] syzkaller1: entered promiscuous mode [ 1760.129674][T27931] syzkaller1: entered allmulticast mode [ 1760.163474][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29906'. [ 1760.360251][T27751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1760.381366][ T5630] Bluetooth: hci0: command tx timeout [ 1760.393266][T27751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1760.885269][T27751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1760.913815][T27751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1760.941869][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1760.950359][T27751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1761.023800][T27751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1761.070126][T27751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1761.107757][T27751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1761.164888][T27963] team0: Port device xfrm0 removed [ 1761.182256][T27963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1761.299574][T25681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.328732][T25681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.354734][T27751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.400877][T27751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.420690][T19691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.427876][T19691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.473411][T19691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.480613][T19691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.524687][T27985] netlink: 'syz.2.29921': attribute type 11 has an invalid length. [ 1761.549206][T27985] netlink: 'syz.2.29921': attribute type 11 has an invalid length. [ 1761.574238][T27985] netlink: 224 bytes leftover after parsing attributes in process `syz.2.29921'. [ 1761.631915][T27985] netlink: 'syz.2.29921': attribute type 5 has an invalid length. [ 1761.680381][T27994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29923'. [ 1762.008330][T28008] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1762.075709][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1762.163472][T27751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.433371][T28041] netlink: 'syz.5.29933': attribute type 1 has an invalid length. [ 1762.457586][ T5630] Bluetooth: hci0: command tx timeout [ 1762.467386][T28041] netlink: 96 bytes leftover after parsing attributes in process `syz.5.29933'. [ 1762.489013][T28041] netlink: 1 bytes leftover after parsing attributes in process `syz.5.29933'. [ 1762.853086][T27751] veth0_vlan: entered promiscuous mode [ 1762.883930][T27751] veth1_vlan: entered promiscuous mode [ 1762.973943][T27751] veth0_macvtap: entered promiscuous mode [ 1763.004296][T27751] veth1_macvtap: entered promiscuous mode [ 1763.089931][T27751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.093246][T28069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29941'. [ 1763.109682][T27751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.139491][T28066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29941'. [ 1763.141212][T19691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.164335][T19691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.185721][T28066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29941'. [ 1763.200402][T28069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29941'. [ 1763.212552][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1763.213519][T19691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.241304][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29945'. [ 1763.280808][T19691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.534475][T25669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.567819][T25669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.634894][T31194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.661400][T31194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.802239][T28101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29951'. [ 1763.813641][T28102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29952'. [ 1763.871435][T28101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29951'. [ 1763.922925][T28106] netlink: 68 bytes leftover after parsing attributes in process `syz.6.29859'. [ 1763.964517][T28106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.29859'. [ 1764.160792][T28117] netlink: 'syz.0.29957': attribute type 2 has an invalid length. [ 1764.179813][T28117] netlink: 'syz.0.29957': attribute type 11 has an invalid length. [ 1764.260188][T25669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1764.279719][T25669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1764.301045][T12447] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1764.316931][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1764.336696][T28124] Bluetooth: MGMT ver 1.23 [ 1764.535210][ T5630] Bluetooth: hci0: command tx timeout [ 1765.096356][T25529] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1765.265595][T12447] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1765.465311][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1766.575304][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1767.696368][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1768.135356][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1768.806523][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1769.936413][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1771.056008][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1772.155835][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1773.266335][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1774.386499][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1775.498830][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1776.377160][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1776.656345][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1777.766010][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1778.295558][ C0] bridge0: port 3(vlan2) entered learning state [ 1778.301968][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1778.886453][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1780.015964][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1781.125766][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1782.265837][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1783.386360][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1784.505426][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1785.615732][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1786.716227][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1787.825735][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1788.955650][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1790.085928][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1791.206384][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1792.355969][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1792.375407][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.505833][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1794.617210][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1795.736601][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1796.845944][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1797.976518][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1799.096230][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1800.205561][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1801.315718][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1802.445893][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1803.565657][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1804.519048][T28144] netlink: 'syz.0.29961': attribute type 62 has an invalid length. [ 1804.530669][T28149] __nla_validate_parse: 67 callbacks suppressed [ 1804.530690][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29963'. [ 1804.554276][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29961'. [ 1804.581419][T28144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1804.608280][T28144] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1804.627501][T28144] gretap2: entered promiscuous mode [ 1804.632801][T28144] gretap2: entered allmulticast mode [ 1804.665783][T28162] xt_hashlimit: size too large, truncated to 1048576 [ 1804.679393][T28166] xt_l2tp: v2 doesn't support IP mode [ 1804.716758][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1804.725289][T28153] gre1: entered promiscuous mode [ 1804.740505][T28153] gre1: entered allmulticast mode [ 1804.836123][T28172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.29968'. [ 1804.846738][T28172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29968'. [ 1804.900613][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29969'. [ 1804.984044][T28174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29969'. [ 1805.010617][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.29972'. [ 1805.027593][T28174] geneve0: entered promiscuous mode [ 1805.049880][T28180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.29972'. [ 1805.101412][T28186] netlink: 'syz.6.29972': attribute type 32 has an invalid length. [ 1805.281843][T28196] gtp1: entered allmulticast mode [ 1805.303989][T28196] team0: Port device gtp1 added [ 1805.474180][T28205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.29979'. [ 1805.488156][T28205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29979'. [ 1805.522295][T28204] netlink: 'syz.6.29980': attribute type 1 has an invalid length. [ 1805.546124][T28204] netlink: 'syz.6.29980': attribute type 2 has an invalid length. [ 1805.564198][T28210] tipc: New replicast peer: 0.0.0.0 [ 1805.572587][T28210] tipc: Enabled bearer , priority 10 [ 1805.839628][T28225] netlink: 'syz.0.29986': attribute type 5 has an invalid length. [ 1805.857175][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1805.914462][T28232] netlink: 'syz.2.29989': attribute type 1 has an invalid length. [ 1806.121506][T28247] »»»»»»: renamed from lo (while UP) [ 1806.303508][T28254] sctp: [Deprecated]: syz.5.29996 (pid 28254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1806.303508][T28254] Use struct sctp_sack_info instead [ 1806.483124][T28267] netlink: 'syz.6.30001': attribute type 1 has an invalid length. [ 1806.496978][T28267] netlink: 'syz.6.30001': attribute type 1 has an invalid length. [ 1806.625902][T28281] netlink: 'syz.0.30005': attribute type 11 has an invalid length. [ 1806.664929][T28280] netlink: 'syz.5.30006': attribute type 1 has an invalid length. [ 1806.685354][T27226] tipc: Node number set to 820467405 [ 1806.710174][T28288] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1806.831260][T28290] bond16 (unregistering): Released all slaves [ 1806.911890][T28301] netlink: 'syz.6.30012': attribute type 11 has an invalid length. [ 1806.966820][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1807.204417][T28323] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1807.543035][T28152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1807.611676][T28352] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1807.696649][T28349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1807.977803][T28379] FAULT_INJECTION: forcing a failure. [ 1807.977803][T28379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.055899][T28379] CPU: 0 UID: 0 PID: 28379 Comm: syz.2.30036 Not tainted syzkaller #0 PREEMPT(full) [ 1808.055929][T28379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.055941][T28379] Call Trace: [ 1808.055948][T28379] [ 1808.055957][T28379] dump_stack_lvl+0xe8/0x150 [ 1808.055986][T28379] should_fail_ex+0x40c/0x560 [ 1808.056011][T28379] _copy_from_user+0x2d/0xb0 [ 1808.056037][T28379] ___sys_sendmsg+0x1c6/0x360 [ 1808.056066][T28379] ? rcu_is_watching+0x15/0xb0 [ 1808.056085][T28379] ? get_pid_task+0x20/0x1f0 [ 1808.056104][T28379] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.056134][T28379] ? rcu_is_watching+0x15/0xb0 [ 1808.056165][T28379] ? __fget_files+0x2a/0x420 [ 1808.056187][T28379] ? __fget_files+0x3a2/0x420 [ 1808.056212][T28379] __x64_sys_sendmsg+0x1b1/0x290 [ 1808.056239][T28379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1808.056272][T28379] ? rcu_is_watching+0x15/0xb0 [ 1808.056292][T28379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.056312][T28379] do_syscall_64+0x174/0x580 [ 1808.056340][T28379] ? clear_bhb_loop+0x40/0x90 [ 1808.056362][T28379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.056380][T28379] RIP: 0033:0x7efc4d39ce59 [ 1808.056399][T28379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.056416][T28379] RSP: 002b:00007efc4e1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1808.056438][T28379] RAX: ffffffffffffffda RBX: 00007efc4d615fa0 RCX: 00007efc4d39ce59 [ 1808.056453][T28379] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1808.056466][T28379] RBP: 00007efc4e1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.056478][T28379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.056491][T28379] R13: 00007efc4d616038 R14: 00007efc4d615fa0 R15: 00007ffeff894c38 [ 1808.056513][T28379] [ 1808.258227][T31194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1808.375207][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1808.382479][ C0] bridge0: topology change detected, propagating [ 1808.389091][ C0] bridge0: port 3(vlan2) entered forwarding state [ 1808.395558][ C0] bridge0: topology change detected, propagating [ 1808.496909][T28405] team0: Device xfrm0 is of different type [ 1808.599144][T28408] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1808.885776][T28433] ip6t_srh: unknown srh invflags 4000 [ 1809.367938][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1809.662930][T28473] syzkaller0: left allmulticast mode [ 1809.678047][T28476] __nla_validate_parse: 18 callbacks suppressed [ 1809.678067][T28476] netlink: 348 bytes leftover after parsing attributes in process `syz.0.30063'. [ 1809.702175][T28478] validate_nla: 3 callbacks suppressed [ 1809.702212][T28478] netlink: 'syz.5.30064': attribute type 1 has an invalid length. [ 1809.739697][T28478] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1809.785491][T28491] team0: Port device xfrm0 added [ 1809.903999][T28500] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.30070'. [ 1809.922273][T28500] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1809.933442][T28500] 0ªX¹¦Dö»: entered allmulticast mode [ 1810.002361][T28517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30073'. [ 1810.011571][T28517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30073'. [ 1810.051556][T28521] netlink: 348 bytes leftover after parsing attributes in process `syz.0.30075'. [ 1810.113423][T28527] team0: Device xfrm0 is of different type [ 1810.172821][T28533] netlink: 'syz.0.30077': attribute type 1 has an invalid length. [ 1810.195797][T28533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.30077'. [ 1810.698994][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1810.852178][T28565] netlink: 348 bytes leftover after parsing attributes in process `syz.0.30089'. [ 1811.231445][T28591] netlink: 666 bytes leftover after parsing attributes in process `syz.6.30097'. [ 1811.268276][T28597] Cannot find set identified by id 1 to match [ 1811.410833][T28601] netlink: 'syz.5.30099': attribute type 1 has an invalid length. [ 1811.562299][T28605] bond17: (slave geneve5): making interface the new active one [ 1811.648521][T28605] bond17: (slave geneve5): Enslaving as an active interface with an up link [ 1811.661709][T28621] netlink: 'syz.6.30103': attribute type 1 has an invalid length. [ 1811.676873][T25683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1811.697807][T25683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1811.719012][T25681] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1811.750528][T25681] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1811.846289][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1811.858522][T28637] xt_recent: Unsupported userspace flags (000000b1) [ 1812.058281][T28654] netlink: 'syz.3.30116': attribute type 9 has an invalid length. [ 1812.111263][T28657] netlink: 68 bytes leftover after parsing attributes in process `syz.2.30117'. [ 1812.127485][T28657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30117'. [ 1812.209503][T28663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1812.382223][T28671] netlink: 'syz.3.30121': attribute type 1 has an invalid length. [ 1812.443765][T28671] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1812.472982][T28678] bond12: (slave veth0_to_bond): making interface the new active one [ 1812.514715][T28678] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1812.565903][T28671] macvlan3: entered promiscuous mode [ 1812.571833][T28671] macvlan3: entered allmulticast mode [ 1812.580251][T28671] bond12: entered promiscuous mode [ 1812.586992][T28671] veth0_to_bond: entered promiscuous mode [ 1812.594930][T28671] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1812.606984][T28671] bond12: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1812.631470][T28671] bond12: left promiscuous mode [ 1812.637230][T28671] veth0_to_bond: left promiscuous mode [ 1812.944633][T28708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1812.981495][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1813.089296][T28715] netlink: 'syz.0.30134': attribute type 5 has an invalid length. [ 1813.269423][T28727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1813.279780][T28726] netlink: 'syz.6.30139': attribute type 1 has an invalid length. [ 1813.327880][T28726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1813.401141][T28726] bond1: (slave veth0_to_bond): making interface the new active one [ 1813.411300][T28726] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1813.434629][T28726] macvlan2: entered promiscuous mode [ 1813.440522][T28726] macvlan2: entered allmulticast mode [ 1813.447292][T28726] bond1: entered promiscuous mode [ 1813.452367][T28726] veth0_to_bond: entered promiscuous mode [ 1813.459069][T28726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1813.482176][T28726] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1813.507388][T28726] bond1: left promiscuous mode [ 1813.541889][T28726] veth0_to_bond: left promiscuous mode [ 1814.084889][T28776] netlink: 'syz.2.30153': attribute type 1 has an invalid length. [ 1814.131609][T28776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1814.136931][T28778] Bluetooth: MGMT ver 1.23 [ 1814.150694][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1814.640612][T28804] netlink: 'syz.6.30161': attribute type 15 has an invalid length. [ 1814.762234][T28812] netlink: 'syz.2.30167': attribute type 1 has an invalid length. [ 1814.838561][T28812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1814.897856][T28821] team0: Port device xfrm0 removed [ 1814.899870][T28819] openvswitch: netlink: IP tunnel dst address not specified [ 1814.915691][T28821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1814.949184][T28822] openvswitch: netlink: IP tunnel dst address not specified [ 1815.044563][T28832] __nla_validate_parse: 7 callbacks suppressed [ 1815.044584][T28832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30173'. [ 1815.266874][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1815.311338][T28848] x_tables: unsorted underflow at hook 1 [ 1815.431018][T28852] x_tables: duplicate underflow at hook 2 [ 1815.452958][T28857] netlink: 'syz.6.30183': attribute type 9 has an invalid length. [ 1815.690045][T28871] netlink: 'syz.2.30187': attribute type 1 has an invalid length. [ 1815.767622][T28871] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1815.787072][T28873] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1815.873668][T28871] macvlan2: entered promiscuous mode [ 1815.890929][T28871] macvlan2: entered allmulticast mode [ 1815.912653][T28871] bond9: entered promiscuous mode [ 1815.919966][T28871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1815.930346][T28871] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1815.951451][T28871] bond9: left promiscuous mode [ 1816.052132][T28882] team0: Device xfrm0 is of different type [ 1816.154831][T28885] netlink: 52 bytes leftover after parsing attributes in process `syz.6.30191'. [ 1816.167877][T28885] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1816.193723][T28887] netlink: 'syz.2.30193': attribute type 4 has an invalid length. [ 1816.321782][T28893] netlink: 'syz.5.30196': attribute type 1 has an invalid length. [ 1816.385659][T25682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1816.649835][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30203'. [ 1816.941466][T28921] netlink: 'syz.3.30204': attribute type 1 has an invalid length. [ 1816.976828][T28921] netlink: 96 bytes leftover after parsing attributes in process `syz.3.30204'. [ 1817.012082][T28921] netlink: 1 bytes leftover after parsing attributes in process `syz.3.30204'. [ 1817.024161][T28921] netlink: 'syz.3.30204': attribute type 1 has an invalid length. [ 1817.043345][T28921] netlink: 'syz.3.30204': attribute type 8 has an invalid length. [ 1817.066900][T28921] netlink: 606 bytes leftover after parsing attributes in process `syz.3.30204'. [ 1817.079623][T28903] netlink: 44 bytes leftover after parsing attributes in process `syz.5.30201'. [ 1817.098666][T28903] netlink: 36 bytes leftover after parsing attributes in process `syz.5.30201'. [ 1817.128380][T28903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.30201'. [ 1817.172666][T28932] lo speed is unknown, defaulting to 1000 [ 1817.179358][T28932] lo speed is unknown, defaulting to 1000 [ 1817.368472][T28947] netlink: 'syz.3.30213': attribute type 10 has an invalid length. [ 1817.410352][T28947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.487270][T28947] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1817.514852][T28957] netlink: 'syz.0.30218': attribute type 1 has an invalid length. [ 1817.629081][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1817.655256][T28957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1817.702782][T28947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1817.722120][T28947] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1817.751655][T28947] bond0 (unregistering): Released all slaves [ 1817.801303][T28970] tunl0: left promiscuous mode [ 1817.830008][T28970] ipvlan0: left allmulticast mode [ 1817.840631][T28970] macvtap0: left allmulticast mode [ 1817.848099][T28970] veth0_macvtap: left allmulticast mode [ 1817.856705][T28970] geneve0: left promiscuous mode [ 1817.872114][T28970] vlan2: left promiscuous mode [ 1817.878692][T28970] geneve1: left promiscuous mode [ 1817.897069][T28970] vlan2: left allmulticast mode [ 1817.916841][T28970] geneve1: left allmulticast mode [ 1817.938428][T28970] macvtap1: left promiscuous mode [ 1817.944443][T28970] macvtap1: left allmulticast mode [ 1817.958513][T28970] bond0: left promiscuous mode [ 1817.963496][T28970] bridge4: left promiscuous mode [ 1818.001429][T28970] mac80211_hwsim hwsim138 syzkaller0: left promiscuous mode [ 1818.009224][T28970] mac80211_hwsim hwsim138 syzkaller0: left allmulticast mode [ 1818.018617][T28970] bridge5: left promiscuous mode [ 1818.023615][T28970] bridge5: left allmulticast mode [ 1818.030547][T28970] macvtap2: left promiscuous mode [ 1818.035690][T28970] vlan0: left promiscuous mode [ 1818.040715][T28970] macvtap2: left allmulticast mode [ 1818.046024][T28970] vlan0: left allmulticast mode [ 1818.050914][T28970] veth0_vlan: left allmulticast mode [ 1818.058067][T28970] bond5: left promiscuous mode [ 1818.086299][T27226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1818.174978][T28989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30225'. [ 1818.240563][T28978] vlan9: entered allmulticast mode [ 1818.255670][T28978] bond0: entered allmulticast mode [ 1818.327103][T25682] bond12: (slave veth0_to_bond): link status definitely down, disabling slave [ 1818.358570][T25682] bond12: now running without any active interface! [ 1818.415683][T28995] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1818.430869][T29004] FAULT_INJECTION: forcing a failure. [ 1818.430869][T29004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.444193][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.3.30229 Not tainted syzkaller #0 PREEMPT(full) [ 1818.444219][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1818.444230][T29004] Call Trace: [ 1818.444238][T29004] [ 1818.444246][T29004] dump_stack_lvl+0xe8/0x150 [ 1818.444272][T29004] should_fail_ex+0x40c/0x560 [ 1818.444295][T29004] _copy_from_user+0x2d/0xb0 [ 1818.444321][T29004] do_ipv6_setsockopt+0x249/0x3180 [ 1818.444350][T29004] ? kstrtoull+0x12f/0x1d0 [ 1818.444369][T29004] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1818.444391][T29004] ? kstrtouint+0x6e/0xe0 [ 1818.444410][T29004] ? __mutex_trylock_common+0x15f/0x270 [ 1818.444433][T29004] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1818.444456][T29004] ? rcu_is_watching+0x15/0xb0 [ 1818.444475][T29004] ? trace_contention_end+0x3d/0x140 [ 1818.444497][T29004] ? __mutex_lock+0x30d/0x1550 [ 1818.444524][T29004] ? lock_release+0x4b/0x3c0 [ 1818.444558][T29004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1818.444585][T29004] ? preempt_count_add+0x91/0x190 [ 1818.444608][T29004] ? smc_setsockopt+0x174/0xb00 [ 1818.444634][T29004] ? __pfx___mutex_lock+0x10/0x10 [ 1818.444658][T29004] ? lock_release+0x4b/0x3c0 [ 1818.444689][T29004] ipv6_setsockopt+0x59/0x170 [ 1818.444712][T29004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1818.444736][T29004] smc_setsockopt+0x232/0xb00 [ 1818.444763][T29004] ? __pfx_smc_setsockopt+0x10/0x10 [ 1818.444785][T29004] ? aa_sock_opt_perm+0xff/0x1a0 [ 1818.444808][T29004] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1818.444840][T29004] ? __pfx_smc_setsockopt+0x10/0x10 [ 1818.444864][T29004] do_sock_setsockopt+0x17c/0x1b0 [ 1818.444892][T29004] __x64_sys_setsockopt+0x13d/0x1b0 [ 1818.444918][T29004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.444938][T29004] do_syscall_64+0x174/0x580 [ 1818.444961][T29004] ? trace_irq_disable+0x3b/0x140 [ 1818.444986][T29004] ? clear_bhb_loop+0x40/0x90 [ 1818.445010][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.445030][T29004] RIP: 0033:0x7f09fdd9ce59 [ 1818.445047][T29004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.445064][T29004] RSP: 002b:00007f09fece4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1818.445087][T29004] RAX: ffffffffffffffda RBX: 00007f09fe015fa0 RCX: 00007f09fdd9ce59 [ 1818.445101][T29004] RDX: 0000000000000003 RSI: 0000000000000029 RDI: 0000000000000003 [ 1818.445113][T29004] RBP: 00007f09fece4090 R08: 0000000000000004 R09: 0000000000000000 [ 1818.445125][T29004] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1818.445138][T29004] R13: 00007f09fe016038 R14: 00007f09fe015fa0 R15: 00007ffdd198d1b8 [ 1818.445161][T29004] [ 1818.739708][T28995] macvlan4: entered promiscuous mode [ 1818.745449][T28995] macvlan4: entered allmulticast mode [ 1818.752101][T28995] bond8: entered promiscuous mode [ 1818.767422][T28995] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1818.787282][T28995] bond8: left promiscuous mode [ 1818.853119][T29012] team0: Device xfrm0 is of different type [ 1818.948481][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1819.016267][T27226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1819.092568][T29021] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 1819.228836][T29026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1819.406594][T29040] FAULT_INJECTION: forcing a failure. [ 1819.406594][T29040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1819.420936][T12450] IPVS: starting estimator thread 0... [ 1819.438381][T29040] CPU: 0 UID: 0 PID: 29040 Comm: syz.2.30242 Not tainted syzkaller #0 PREEMPT(full) [ 1819.438410][T29040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.438421][T29040] Call Trace: [ 1819.438429][T29040] [ 1819.438439][T29040] dump_stack_lvl+0xe8/0x150 [ 1819.438463][T29040] should_fail_ex+0x40c/0x560 [ 1819.438485][T29040] _copy_from_user+0x2d/0xb0 [ 1819.438509][T29040] smc_setsockopt+0x3c0/0xb00 [ 1819.438544][T29040] ? __pfx_smc_setsockopt+0x10/0x10 [ 1819.438565][T29040] ? aa_sock_opt_perm+0xff/0x1a0 [ 1819.438585][T29040] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1819.438608][T29040] ? __pfx_smc_setsockopt+0x10/0x10 [ 1819.438629][T29040] do_sock_setsockopt+0x17c/0x1b0 [ 1819.438655][T29040] __x64_sys_setsockopt+0x13d/0x1b0 [ 1819.438680][T29040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.438699][T29040] do_syscall_64+0x174/0x580 [ 1819.438722][T29040] ? trace_irq_disable+0x3b/0x140 [ 1819.438746][T29040] ? clear_bhb_loop+0x40/0x90 [ 1819.438767][T29040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.438785][T29040] RIP: 0033:0x7efc4d39ce59 [ 1819.438803][T29040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.438820][T29040] RSP: 002b:00007efc4e1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1819.438842][T29040] RAX: ffffffffffffffda RBX: 00007efc4d615fa0 RCX: 00007efc4d39ce59 [ 1819.438856][T29040] RDX: 0000000000000003 RSI: 0000000000000029 RDI: 0000000000000003 [ 1819.438868][T29040] RBP: 00007efc4e1f2090 R08: 0000000000000004 R09: 0000000000000000 [ 1819.438880][T29040] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1819.438892][T29040] R13: 00007efc4d616038 R14: 00007efc4d615fa0 R15: 00007ffeff894c38 [ 1819.438914][T29040] [ 1819.738275][T29041] IPVS: using max 47 ests per chain, 112800 per kthread [ 1819.814362][T29047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.821876][T29047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.006181][T29047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1820.031816][T29047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1820.187767][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1820.272395][T29065] mac80211_hwsim hwsim138 syzkaller0: entered promiscuous mode [ 1820.289085][T29065] mac80211_hwsim hwsim138 syzkaller0: entered allmulticast mode [ 1820.310582][T29067] erspan0: entered promiscuous mode [ 1820.319513][T29067] erspan0: entered allmulticast mode [ 1820.349057][T25685] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.361562][T25685] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.422944][T25685] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.444941][T25685] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.739136][T29107] __nla_validate_parse: 3 callbacks suppressed [ 1820.739155][T29107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30258'. [ 1820.947839][T29120] netlink: 14 bytes leftover after parsing attributes in process `syz.6.30262'. [ 1821.013053][T29121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30261'. [ 1821.049747][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30261'. [ 1821.071903][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30261'. [ 1821.124792][T29121] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1821.144136][T29125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30264'. [ 1821.185442][T29125] netlink: 64 bytes leftover after parsing attributes in process `syz.0.30264'. [ 1821.255929][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30268'. [ 1821.328515][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1821.377502][T29140] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.30269'. [ 1821.421925][T29148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30271'. [ 1821.458474][T29140] xt_hashlimit: overflow, rate too high: 0 [ 1821.471728][T29140] validate_nla: 6 callbacks suppressed [ 1821.471747][T29140] netlink: 'syz.0.30269': attribute type 2 has an invalid length. [ 1821.497770][T29140] netlink: 'syz.0.30269': attribute type 8 has an invalid length. [ 1821.593051][T29156] netlink: 'syz.5.30274': attribute type 75 has an invalid length. [ 1821.685829][T29158] lo speed is unknown, defaulting to 1000 [ 1821.692639][T29158] lo speed is unknown, defaulting to 1000 [ 1821.820924][T29164] netlink: 'syz.3.30280': attribute type 1 has an invalid length. [ 1821.939534][T29168] bond0: (slave gretap0): making interface the new active one [ 1821.948775][T29168] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1822.468775][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1822.485981][T29200] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1822.596121][T29211] netlink: 'syz.2.30293': attribute type 11 has an invalid length. [ 1822.634905][T29214] netlink: 'syz.0.30294': attribute type 1 has an invalid length. [ 1822.647724][T29211] netlink: 'syz.2.30293': attribute type 11 has an invalid length. [ 1822.678612][T29214] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1822.714544][T29218] bond9: (slave geneve2): making interface the new active one [ 1822.726513][T29218] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1822.737821][T31186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.760514][T29220] ip6gre2: entered promiscuous mode [ 1822.768199][T31186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.801650][T31186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.819376][T31186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.824056][T29224] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1822.969690][T29228] ip6erspan0: entered allmulticast mode [ 1823.323706][T29247] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1823.595777][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1823.613291][T29264] netlink: 'syz.2.30317': attribute type 3 has an invalid length. [ 1823.630976][T29264] netlink: 'syz.2.30317': attribute type 3 has an invalid length. [ 1824.084836][T29271] batman_adv: batadv0: Adding interface: dummy0 [ 1824.121386][T29271] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1824.156815][T29271] batman_adv: batadv0: Interface activated: dummy0 [ 1824.239500][T29273] batadv0: mtu less than device minimum [ 1824.258959][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.270097][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.281278][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.292383][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.303455][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.314584][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.325733][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.336823][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.347920][T29273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1824.368956][T27752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1824.375221][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1824.384219][T27752] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1824.399671][T27752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1824.411914][T27752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1824.421025][T27752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1824.777410][T19691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1824.858599][T31186] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1824.931646][T31186] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1825.088355][T31186] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1825.384598][T29300] lo speed is unknown, defaulting to 1000 [ 1825.393435][T29300] lo speed is unknown, defaulting to 1000 [ 1825.631093][T31186] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1825.662443][T29362] netlink: 'syz.6.30337': attribute type 1 has an invalid length. [ 1825.904915][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1825.980930][T29372] __nla_validate_parse: 20 callbacks suppressed [ 1825.980951][T29372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30338'. [ 1826.154663][T29369] lo speed is unknown, defaulting to 1000 [ 1826.208044][T29369] lo speed is unknown, defaulting to 1000 [ 1826.308020][T25685] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.310460][T29393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30341'. [ 1826.433113][T25672] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.457265][ T5630] Bluetooth: hci6: command tx timeout [ 1826.632277][T25669] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.636205][T29408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.30343'. [ 1826.687456][T25669] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.763473][T31186] vlan2: left allmulticast mode [ 1826.791230][T31186] bridge_slave_0: left allmulticast mode [ 1826.800960][T31186] vlan2: left promiscuous mode [ 1826.809115][T31186] bridge_slave_0: left promiscuous mode [ 1826.817594][T31186] bridge0: port 3(vlan2) entered disabled state [ 1826.832643][T31186] veth0_to_bond: left allmulticast mode [ 1826.841892][T31186] veth0_to_bond: left promiscuous mode [ 1826.850531][T31186] bridge5: port 2(veth0_to_bond) entered disabled state [ 1826.877535][T31186] veth5: left allmulticast mode [ 1826.891304][T31186] veth5: left promiscuous mode [ 1826.897062][T31186] bridge5: port 1(veth5) entered disabled state [ 1826.949788][T29426] validate_nla: 2 callbacks suppressed [ 1826.949808][T29426] netlink: 'syz.3.30347': attribute type 1 has an invalid length. [ 1827.008992][T31186] bond5 (unregistering): (slave vti0): Releasing backup interface [ 1827.017840][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1827.076487][T31186] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1827.131744][T31186] bond17 (unregistering): (slave geneve5): Releasing active interface [ 1827.149721][T31186] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1827.213030][T31186] .` (unregistering): Released all slaves [ 1827.220672][T31186] bond1 (unregistering): Released all slaves [ 1827.230059][T31186] bond2 (unregistering): Released all slaves [ 1827.250500][T31186] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1827.271242][T31186] bond3 (unregistering): Released all slaves [ 1827.298896][T31186] bond4 (unregistering): Released all slaves [ 1827.311566][T31186] bond5 (unregistering): Released all slaves [ 1827.337027][T31186] bond6 (unregistering): Released all slaves [ 1827.353663][T31186] bond7 (unregistering): Released all slaves [ 1827.370713][T31186] bond8 (unregistering): Released all slaves [ 1827.382646][T31186] bond9 (unregistering): Released all slaves [ 1827.412173][T31186] bond0 (unregistering): Released all slaves [ 1827.439225][T31186] bond10 (unregistering): Released all slaves [ 1827.454282][T31186] bond11 (unregistering): Released all slaves [ 1827.470302][T31186] bond12 (unregistering): Released all slaves [ 1827.484839][T31186] bond13 (unregistering): Released all slaves [ 1827.503085][T31186] bond14 (unregistering): Released all slaves [ 1827.524254][T31186] bond15 (unregistering): Released all slaves [ 1827.542342][T31186] bond16 (unregistering): Released all slaves [ 1827.557380][T31186] bond17 (unregistering): Released all slaves [ 1827.684911][T29426] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1827.731647][T29429] bond12: (slave veth0_to_bond): Releasing active interface [ 1827.760467][T29429] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1827.774594][T29432] macvlan2: entered promiscuous mode [ 1827.780721][T29432] macvlan2: entered allmulticast mode [ 1827.787584][T29432] bond13: entered promiscuous mode [ 1827.793236][T29432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1827.803145][T29432] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1827.823172][T29432] bond13: left promiscuous mode [ 1827.860227][ T5283] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1827.952411][T31186] : left promiscuous mode [ 1827.979515][T29442] syzkaller1: entered promiscuous mode [ 1827.990404][T29442] syzkaller1: entered allmulticast mode [ 1828.043476][T31186] tipc: Disabling bearer [ 1828.052639][T29449] Unsupported ieee802154 address type: 0 [ 1828.072340][T31186] tipc: Left network mode [ 1828.106865][T29456] netlink: 'syz.6.30351': attribute type 1 has an invalid length. [ 1828.126588][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1828.159643][T29456] netlink: 236 bytes leftover after parsing attributes in process `syz.6.30351'. [ 1828.164587][T29457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.30351'. [ 1828.171830][T29458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.30351'. [ 1828.243498][T29300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.255583][T29300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.276558][T29300] bridge_slave_0: entered allmulticast mode [ 1828.302815][T29300] bridge_slave_0: entered promiscuous mode [ 1828.357405][T29300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.390902][T29300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.410107][T29300] bridge_slave_1: entered allmulticast mode [ 1828.441098][T29300] bridge_slave_1: entered promiscuous mode [ 1828.537248][ T5630] Bluetooth: hci6: command tx timeout [ 1828.644058][T29300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.682695][T29300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.870296][T29300] team0: Port device team_slave_0 added [ 1828.901156][T29485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1828.910107][T29496] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1828.912646][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.30357'. [ 1828.923488][T29300] team0: Port device team_slave_1 added [ 1829.033960][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30358'. [ 1829.145436][T31186] hsr_slave_0: left promiscuous mode [ 1829.188522][T31186] hsr_slave_1: left promiscuous mode [ 1829.302655][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1829.389685][T29524] net_ratelimit: 11 callbacks suppressed [ 1829.389707][T29524] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1829.394861][T29522] netlink: 'syz.0.30365': attribute type 1 has an invalid length. [ 1829.395652][T29524] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1829.620190][T29300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1829.633033][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1829.662786][T29300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1829.685914][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1829.716459][T29522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1829.916060][T29300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1829.935745][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.025567][T29300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.210849][T29300] hsr_slave_0: entered promiscuous mode [ 1830.243877][T29300] hsr_slave_1: entered promiscuous mode [ 1830.258058][T29300] debugfs: 'hsr0' already exists in 'hsr' [ 1830.281963][T29300] Cannot create hsr debugfs directory [ 1830.333794][T29577] netlink: 'syz.3.30371': attribute type 1 has an invalid length. [ 1830.352431][T31186] IPVS: stop unused estimator thread 0... [ 1830.452624][T29577] bond14: entered promiscuous mode [ 1830.466077][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1830.476018][T29577] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1830.559965][T29568] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1830.576611][T29568] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1830.588712][T29568] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1830.615668][ T5630] Bluetooth: hci6: command tx timeout [ 1830.679926][T29577] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1830.701456][T29577] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1830.924547][T29300] netdevsim netdevsim5 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.008168][T29603] syzkaller0: entered promiscuous mode [ 1831.013902][T29603] syzkaller0: entered allmulticast mode [ 1831.033251][T29300] netdevsim netdevsim5 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.089923][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1831.121519][T29300] netdevsim netdevsim5 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.157456][T29300] netdevsim netdevsim5 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.615353][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1831.767464][T29609] netlink: 'syz.3.30377': attribute type 1 has an invalid length. [ 1831.791201][T29609] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1831.808737][T29609] bond13: (slave veth0_to_bond): Releasing active interface [ 1831.828324][T29609] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1831.849016][T29609] macvlan2: entered promiscuous mode [ 1831.854367][T29609] macvlan2: entered allmulticast mode [ 1831.861569][T29609] bond15: entered promiscuous mode [ 1831.868298][T29609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1831.876084][T29609] bond15: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1831.892812][T29609] bond15: left promiscuous mode [ 1832.707416][T27752] Bluetooth: hci6: command tx timeout [ 1832.725756][T25672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1832.924578][T29550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1832.943699][T29300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1832.989163][T29300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1833.004209][T29300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1833.012382][T29620] netlink: 'syz.2.30379': attribute type 1 has an invalid length. [ 1833.066738][T29300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1833.089461][T29300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1833.142506][T29300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1833.213658][T29620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1833.247206][T29300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1833.279810][T29300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1833.317053][T29635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30382'. [ 1833.362381][T29635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30382'. [ 1833.399896][T29651] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1833.582623][T29665] netlink: 'syz.3.30388': attribute type 1 has an invalid length. [ 1833.612767][T29663] netlink: 'syz.0.30389': attribute type 15 has an invalid length. [ 1833.623778][T29300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.670196][T29665] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1833.674763][T29659] netlink: 'syz.2.30387': attribute type 11 has an invalid length. [ 1833.691503][T29670] bond16: (slave geneve2): making interface the new active one [ 1833.702370][T29670] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 1833.714217][T29300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.751243][T29300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1833.763719][T29300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1833.819003][T25681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.826155][T25681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.834012][T12445] IPVS: starting estimator thread 0... [ 1833.860373][T29680] netlink: 'syz.0.30393': attribute type 1 has an invalid length. [ 1833.877558][T25681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.884771][T25681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.984043][T29680] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1833.990126][T29677] IPVS: using max 42 ests per chain, 100800 per kthread [ 1834.016641][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1834.161271][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30395'. [ 1834.259297][T29700] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1834.313660][T29706] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1834.840557][T29737] netlink: 'syz.3.30407': attribute type 1 has an invalid length. [ 1834.978770][T29737] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1835.032088][T29737] macvlan2: entered promiscuous mode [ 1835.038269][T29737] macvlan2: entered allmulticast mode [ 1835.052525][T29737] bond17: entered promiscuous mode [ 1835.066781][T29754] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1835.073859][T29737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1835.104964][T29737] bond17: left promiscuous mode [ 1835.147844][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1835.186456][T29747] bond15: (slave veth0_to_bond): Releasing active interface [ 1835.249762][T29747] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1835.267445][T29748] netlink: 48 bytes leftover after parsing attributes in process `syz.6.30409'. [ 1835.277629][T29764] netlink: 'syz.2.30411': attribute type 9 has an invalid length. [ 1835.303160][T29755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30409'. [ 1835.580458][T29300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.703798][T29787] x_tables: duplicate underflow at hook 4 [ 1835.754958][T29787] vlan7: entered promiscuous mode [ 1835.774529][T29787] geneve1: entered promiscuous mode [ 1835.800702][T29787] vlan7: entered allmulticast mode [ 1835.829157][T29787] geneve1: entered allmulticast mode [ 1835.849278][T29791] team0: Device xfrm0 is of different type [ 1836.044776][T29807] netlink: 'syz.6.30422': attribute type 1 has an invalid length. [ 1836.053514][T29809] nbd: couldn't find a device at index 0 [ 1836.150671][T29813] netlink: 'syz.0.30423': attribute type 9 has an invalid length. [ 1836.186082][T29807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1836.257170][T29817] bond2: (slave gretap1): making interface the new active one [ 1836.267872][T29817] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1836.280267][T29823] netlink: 'syz.3.30424': attribute type 1 has an invalid length. [ 1836.288927][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1836.358834][T29814] lo speed is unknown, defaulting to 1000 [ 1836.467227][T29829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1836.490405][T29823] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1836.514137][T29814] lo speed is unknown, defaulting to 1000 [ 1836.628658][T29819] bond17: (slave veth0_to_bond): Releasing active interface [ 1836.683316][T29819] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1836.728904][T29828] macvlan2: entered promiscuous mode [ 1836.754478][T29828] macvlan2: entered allmulticast mode [ 1836.768322][T29828] bond18: entered promiscuous mode [ 1836.777710][T29828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1836.788052][T29828] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1836.818716][T29828] bond18: left promiscuous mode [ 1837.059494][T29300] veth0_vlan: entered promiscuous mode [ 1837.102511][T29300] veth1_vlan: entered promiscuous mode [ 1837.151678][T29852] team0: Device xfrm0 is of different type [ 1837.284944][T29300] veth0_macvtap: entered promiscuous mode [ 1837.340419][T29300] veth1_macvtap: entered promiscuous mode [ 1837.448876][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1837.459058][T29867] veth1_to_bond: entered allmulticast mode [ 1837.474280][T29872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30437'. [ 1837.485556][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30434'. [ 1837.499450][T29872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30437'. [ 1837.512481][T29866] veth1_to_bond (unregistering): left allmulticast mode [ 1837.543864][T29866] bond0: (slave bond_slave_1): Releasing backup interface [ 1837.569665][T29300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.611029][T29300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.664878][T25685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.703997][T25685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.754228][T25685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.791799][T25685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.079711][T29900] team0: Device xfrm0 is of different type [ 1838.130171][T29905] netlink: 72 bytes leftover after parsing attributes in process `syz.6.30444'. [ 1838.186984][T25681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.214502][T25681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.256719][T29908] netlink: 72 bytes leftover after parsing attributes in process `syz.6.30444'. [ 1838.443205][T28483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.474268][T28483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.601795][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1838.643320][T29923] vlan8: entered allmulticast mode [ 1838.683636][T29923] veth1_virt_wifi: entered allmulticast mode [ 1839.030947][T29944] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1839.076305][T29949] netlink: 44 bytes leftover after parsing attributes in process `syz.6.30454'. [ 1839.120665][T29949] netlink: 35 bytes leftover after parsing attributes in process `syz.6.30454'. [ 1839.164223][T29949] netlink: 'syz.6.30454': attribute type 5 has an invalid length. [ 1839.217665][T29949] netlink: 'syz.6.30454': attribute type 6 has an invalid length. [ 1839.251224][T29949] netlink: 35 bytes leftover after parsing attributes in process `syz.6.30454'. [ 1839.278672][T29956] netlink: 'syz.0.30457': attribute type 1 has an invalid length. [ 1839.394837][T29956] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1839.418172][T29966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.30458'. [ 1839.427445][T29963] bond13: (slave geneve3): making interface the new active one [ 1839.437251][T29963] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 1839.456383][T29967] netlink: 40 bytes leftover after parsing attributes in process `syz.6.30459'. [ 1839.478113][T29966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30458'. [ 1839.776110][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1839.916604][T29993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.30464'. [ 1840.370433][T30020] netlink: 348 bytes leftover after parsing attributes in process `syz.2.30470'. [ 1840.383460][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30469'. [ 1840.570385][T30035] batman_adv: batadv0: Interface deactivated: dummy0 [ 1840.637636][T30035] batman_adv: batadv0: Removing interface: dummy0 [ 1840.689583][T30035] bond9: (slave veth0_to_bond): Releasing active interface [ 1840.769177][T30035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1840.908531][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1841.080953][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30477'. [ 1841.309039][T30077] tipc: Trying to set illegal importance in message [ 1841.516404][T30085] macsec1: entered promiscuous mode [ 1842.014271][T30120] netlink: 'syz.3.30489': attribute type 9 has an invalid length. [ 1842.109303][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1843.217450][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1844.347846][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1844.723685][T30101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1845.006375][T30149] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1845.770258][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1846.079933][T30172] netlink: 'syz.0.30505': attribute type 1 has an invalid length. [ 1846.132406][T30172] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1846.147548][T30166] __nla_validate_parse: 3 callbacks suppressed [ 1846.147569][T30166] netlink: 348 bytes leftover after parsing attributes in process `syz.2.30504'. [ 1846.169840][T30179] bond14: (slave geneve4): making interface the new active one [ 1846.179606][T30179] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 1846.227954][T30182] netlink: 72 bytes leftover after parsing attributes in process `syz.2.30510'. [ 1846.331651][T30188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30512'. [ 1846.352332][T30174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30508'. [ 1846.392137][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30508'. [ 1846.552766][T30201] bridge8: entered promiscuous mode [ 1846.559039][T30201] bridge8: entered allmulticast mode [ 1846.610680][T30201] team0: Port device bridge8 added [ 1846.649407][T30205] bridge0: port 1(team0) entered blocking state [ 1846.664598][T30205] bridge0: port 1(team0) entered disabled state [ 1846.680854][T30205] team0: entered allmulticast mode [ 1846.688880][T30205] bridge5: entered allmulticast mode [ 1846.696509][T30205] team0: entered promiscuous mode [ 1846.704109][T30205] bridge5: entered promiscuous mode [ 1846.750737][T30211] netlink: 24 bytes leftover after parsing attributes in process `syz.6.30518'. [ 1846.792520][T30211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.30518'. [ 1846.819838][T30208] IPv6: NLM_F_CREATE should be specified when creating new route [ 1846.937889][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1846.970740][T30231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30524'. [ 1846.981262][T30231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30524'. [ 1847.013511][T30231] SET target dimension over the limit! [ 1847.059993][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30525'. [ 1847.123409][T30237] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1847.140741][T30237] bond15 (unregistering): Released all slaves [ 1848.059946][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1849.177002][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1850.276114][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1851.405477][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1852.525752][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1853.626426][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1854.737752][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1855.845599][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1856.976649][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1858.106226][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1859.225824][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1860.346512][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1861.456245][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1862.586189][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1863.695761][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1864.816299][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1865.936907][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1867.075462][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1868.196127][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1869.325840][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1870.425633][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1871.536039][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1872.666094][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1873.795982][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1874.916461][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1876.055869][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1877.205626][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1878.306747][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1879.407044][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1880.516043][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1880.865713][T27752] Bluetooth: hci0: command 0x0406 tx timeout [ 1881.635736][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1882.746321][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1883.885963][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1884.996435][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1886.116137][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1887.235573][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1888.345649][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1889.466303][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1890.586175][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1891.706412][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1892.806099][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1893.926109][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1894.135192][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1895.055986][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1896.175401][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1897.285531][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1898.395736][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1899.506042][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1900.636201][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1901.746327][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1902.876270][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1903.986309][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1905.086068][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1906.206184][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1907.306342][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1908.415718][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1909.535955][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1910.635414][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1911.746217][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1912.866713][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1913.986303][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1915.115909][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1916.246259][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1917.366877][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1918.496078][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1919.606078][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1920.736174][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1921.836801][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1922.956781][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1924.075273][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1925.188210][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1926.305574][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1927.405757][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1928.515808][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1929.625947][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1930.735424][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1931.846256][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1932.955290][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1934.075716][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1935.225773][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1936.335662][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1937.455477][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1938.586176][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1939.748559][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1940.886023][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1942.035311][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1943.145872][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1944.255941][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1945.365675][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1946.465961][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1947.415437][T27752] Bluetooth: hci6: command 0x0406 tx timeout [ 1947.596070][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1948.706887][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1949.817624][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1950.925334][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1952.055919][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1953.155583][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1954.266171][T25669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1955.375944][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1956.495168][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1957.615311][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1958.745325][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1959.866202][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1960.985971][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1962.126126][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1963.235949][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1964.365689][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1965.475856][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1966.606061][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1967.738506][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1968.885626][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1969.986152][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1971.096722][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1972.206283][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1973.316531][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1974.435804][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1975.545980][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1976.665533][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1977.785940][T28484] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1978.906090][T25681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1980.025879][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1981.146239][T25677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1982.245681][T25685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1983.355481][T28483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1984.465488][T31186] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1985.016057][ T31] INFO: task syz.5.30463:29979 blocked for more than 143 seconds. [ 1985.023968][ T31] Not tainted syzkaller #0 [ 1985.029145][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1985.038487][ T31] task:syz.5.30463 state:D stack:27568 pid:29979 tgid:29978 ppid:29300 task_flags:0x400140 flags:0x00080002 [ 1985.050974][ T31] Call Trace: [ 1985.054294][ T31] [ 1985.057456][ T31] __schedule+0x17d9/0x56c0 [ 1985.062028][ T31] ? stack_trace_save+0xa9/0x100 [ 1985.067145][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1985.073792][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 1985.079511][ T31] ? genl_rcv+0x28/0x40 [ 1985.083715][ T31] ? __pfx___schedule+0x10/0x10 [ 1985.088888][ T31] ? rcu_is_watching+0x15/0xb0 [ 1985.093693][ T31] ? rcu_is_watching+0x15/0xb0 [ 1985.099317][ T31] ? lock_release+0x4b/0x3c0 [ 1985.104235][ T31] ? rcu_is_watching+0x15/0xb0 [ 1985.110087][ T31] schedule+0x164/0x360 [ 1985.114293][ T31] schedule_preempt_disabled+0x13/0x30 [ 1985.119926][ T31] __mutex_lock+0x7bf/0x1550 [ 1985.124559][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1985.129459][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1985.135886][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1985.140965][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1985.145727][ T31] ? genlmsg_put+0x137/0x2e0 [ 1985.150354][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 1985.156064][ T31] ? __nla_parse+0x40/0x60 [ 1985.160526][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1985.167123][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1985.173497][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1985.184080][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1985.190008][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1985.196775][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1985.202222][ T31] genl_rcv_msg+0x614/0x7a0 [ 1985.207070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1985.212140][ T31] ? ref_tracker_free+0x689/0x830 [ 1985.217377][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1985.223490][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1985.229509][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1985.234341][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1985.239536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1985.245071][ T31] ? down_read+0x2be/0x330 [ 1985.249534][ T31] genl_rcv+0x28/0x40 [ 1985.253533][ T31] netlink_unicast+0x7bb/0x940 [ 1985.259136][ T31] netlink_sendmsg+0x813/0xb40 [ 1985.263953][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.269435][ T31] ? futex_unqueue+0x22/0x240 [ 1985.274253][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1985.279383][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1985.284801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1985.291938][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 1985.298654][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1985.304525][ T31] ? lock_release+0x4b/0x3c0 [ 1985.309476][ T31] ? import_iovec+0x73/0xa0 [ 1985.314046][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1985.319513][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.324771][ T31] ? futex_wait+0x2a2/0x390 [ 1985.329468][ T31] ? __fget_files+0x2a/0x420 [ 1985.334095][ T31] ? __fget_files+0x3a2/0x420 [ 1985.339477][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1985.344470][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1985.350477][ T31] ? rcu_is_watching+0x15/0xb0 [ 1985.355409][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.361511][ T31] do_syscall_64+0x174/0x580 [ 1985.366318][ T31] ? trace_irq_disable+0x3b/0x140 [ 1985.371391][ T31] ? clear_bhb_loop+0x40/0x90 [ 1985.376590][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.382524][ T31] RIP: 0033:0x7f09d079ce59 [ 1985.387093][ T31] RSP: 002b:00007f09d15e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.395674][ T31] RAX: ffffffffffffffda RBX: 00007f09d0a15fa0 RCX: 00007f09d079ce59 [ 1985.403712][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1985.413013][ T31] RBP: 00007f09d0832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1985.421348][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.429562][ T31] R13: 00007f09d0a16038 R14: 00007f09d0a15fa0 R15: 00007fff6585fe58 [ 1985.438160][ T31] [ 1985.441249][ T31] INFO: lockdep is turned off. [ 1985.446314][ T31] NMI backtrace for cpu 0 [ 1985.446331][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1985.446352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1985.446363][ T31] Call Trace: [ 1985.446370][ T31] [ 1985.446378][ T31] dump_stack_lvl+0xe8/0x150 [ 1985.446403][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1985.446426][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1985.446459][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1985.446482][ T31] sys_info+0x135/0x170 [ 1985.446498][ T31] watchdog+0xfd7/0x1030 [ 1985.446525][ T31] ? watchdog+0x1c7/0x1030 [ 1985.446550][ T31] kthread+0x388/0x470 [ 1985.446567][ T31] ? __pfx_watchdog+0x10/0x10 [ 1985.446589][ T31] ? __pfx_kthread+0x10/0x10 [ 1985.446614][ T31] ret_from_fork+0x514/0xb70 [ 1985.446633][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1985.446652][ T31] ? __switch_to+0xc89/0x1420 [ 1985.446676][ T31] ? __pfx_kthread+0x10/0x10 [ 1985.446694][ T31] ret_from_fork_asm+0x1a/0x30 [ 1985.446722][ T31] [ 1985.446739][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1985.559790][ C1] NMI backtrace for cpu 1 [ 1985.559808][ C1] CPU: 1 UID: 0 PID: 25681 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1985.559827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1985.559838][ C1] Workqueue: 0x0 (bat_events) [ 1985.559864][ C1] RIP: 0010:advance_sched+0x4/0xc80 [ 1985.559885][ C1] Code: 8b 74 24 08 e8 bd f4 38 fb e9 c8 fb ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 81 ec 90 00 00 00 49 89 fe 49 bf [ 1985.559898][ C1] RSP: 0018:ffffc90000a08dd0 EFLAGS: 00000046 [ 1985.559912][ C1] RAX: 0000000000000000 RBX: 1ffff11015d13931 RCX: ffff8880ae89be00 [ 1985.559924][ C1] RDX: 0000000000010000 RSI: ffffffff8c291100 RDI: ffff88808b90f300 [ 1985.559936][ C1] RBP: ffff88808b90f300 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 1985.559948][ C1] R10: dffffc0000000000 R11: ffffffff89b60f50 R12: ffff8880ae89c988 [ 1985.559959][ C1] R13: ffffffff89b60f50 R14: dffffc0000000000 R15: 1ffff110170e5082 [ 1985.559972][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1985.559985][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1985.559997][ C1] CR2: 000055b4ba593660 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1985.560014][ C1] Call Trace: [ 1985.560021][ C1] [ 1985.560027][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1985.560055][ C1] hrtimer_interrupt+0x448/0x910 [ 1985.560082][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1985.560110][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1985.560129][ C1] [ 1985.560135][ C1] [ 1985.560142][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1985.560159][ C1] RIP: 0010:finish_task_switch+0x417/0xbc0 [ 1985.560177][ C1] Code: 03 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 33 fb 15 0a e8 ce 82 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1985.560190][ C1] RSP: 0018:ffffc9000658fa60 EFLAGS: 00000246 [ 1985.560203][ C1] RAX: 0000000000000001 RBX: ffff8880b873bda0 RCX: 0000000080000002 [ 1985.560214][ C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8194a022 [ 1985.560225][ C1] RBP: ffffc9000658fab0 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 1985.560237][ C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: ffff8880ae89be00 [ 1985.560249][ C1] R13: ffff8880b873bd68 R14: dffffc0000000000 R15: 1ffff110170e77b4 [ 1985.560264][ C1] ? finish_task_switch+0x412/0xbc0 [ 1985.560288][ C1] __schedule+0x17e1/0x56c0 [ 1985.560316][ C1] ? __pfx___schedule+0x10/0x10 [ 1985.560333][ C1] ? rcu_is_watching+0x15/0xb0 [ 1985.560351][ C1] ? rcu_is_watching+0x15/0xb0 [ 1985.560366][ C1] ? lock_release+0x4b/0x3c0 [ 1985.560388][ C1] ? wq_worker_sleeping+0x66/0x250 [ 1985.560410][ C1] schedule+0x164/0x360 [ 1985.560428][ C1] worker_thread+0xc12/0xfb0 [ 1985.560458][ C1] kthread+0x388/0x470 [ 1985.560473][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1985.560490][ C1] ? __pfx_kthread+0x10/0x10 [ 1985.560505][ C1] ret_from_fork+0x514/0xb70 [ 1985.560522][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1985.560537][ C1] ? __switch_to+0xc89/0x1420 [ 1985.560558][ C1] ? __pfx_kthread+0x10/0x10 [ 1985.560573][ C1] ret_from_fork_asm+0x1a/0x30 [ 1985.560597][ C1] [ 1985.696317][T25683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1985.698599][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1985.698617][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1985.698637][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1985.698648][ T31] Call Trace: [ 1985.698656][ T31] [ 1985.698665][ T31] vpanic+0x56c/0xa60 [ 1985.698689][ T31] ? __pfx___schedule+0x10/0x10 [ 1985.698711][ T31] ? __pfx_vpanic+0x10/0x10 [ 1985.698730][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1985.698752][ T31] panic+0xc5/0xd0 [ 1985.698770][ T31] ? __pfx_panic+0x10/0x10 [ 1985.698787][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1985.698807][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1985.698831][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1985.698851][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1985.698871][ T31] watchdog+0x1030/0x1030 [ 1985.698897][ T31] ? watchdog+0x1c7/0x1030 [ 1985.698920][ T31] kthread+0x388/0x470 [ 1985.698937][ T31] ? __pfx_watchdog+0x10/0x10 [ 1985.698956][ T31] ? __pfx_kthread+0x10/0x10 [ 1985.698973][ T31] ret_from_fork+0x514/0xb70 [ 1985.698990][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1985.699007][ T31] ? __switch_to+0xc89/0x1420 [ 1985.699030][ T31] ? __pfx_kthread+0x10/0x10 [ 1985.699046][ T31] ret_from_fork_asm+0x1a/0x30 [ 1985.699072][ T31] [ 1985.703159][ T31] Kernel Offset: disabled